Microsoft Removes 119 Edge Extensions Hiding Malware in Images and Fonts
Microsoft has removed 119 malicious extensions from the Edge Add-ons store that used steganography to hide malware in image and font files.…
Tag: remote code execution
Public PoC Released for Critical libssh2 CVE-2026-55200 Client-Side SSH Flaw
A public proof-of-concept (PoC) has been released for CVE-2026-55200, a critical vulnerability in the libssh2 client-side SSH library. The flaw, with a…
Previous libssh2 Integer Overflow CVE-2019-3855
CVE-2019-3855 was a similar integer overflow vulnerability in libssh2's transport read function, fixed in version 1.8.1. It also allowed a malicious server…
CVE-2016-4437: Apache Shiro Vulnerability Weaponized in StrikeShark
CVE-2016-4437 is a vulnerability in Apache Shiro that allows remote code execution. It was listed among the flaws exploited in the StrikeShark…
CVE-2022-41082 (ProxyNotShell): Exchange Server Vulnerability Used in StrikeShark
CVE-2022-41082 is a remote code execution vulnerability in Microsoft Exchange Server, part of the ProxyNotShell attack chain. It was exploited in StrikeShark.
CVE-2023-46747: F5 BIG-IP Vulnerability Weaponized in StrikeShark
CVE-2023-46747 is a critical vulnerability in F5 BIG-IP that allows remote code execution. It was exploited in the StrikeShark campaign.
CVE-2023-20198: Cisco IOS XE Web UI Vulnerability Used in StrikeShark
CVE-2023-20198 is a critical vulnerability in Cisco IOS XE Web UI that allows remote code execution. It was exploited in the StrikeShark…
CISA Adds Exploited PTC Windchill RCE Flaw to KEV as Web Shell Attacks Continue
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical remote code execution vulnerability affecting PTC Windchill PDMlink and PTC…
CVE-2026-4747: FreeBSD NFS Server Remote Code Execution Flaw
A 17-year-old remote code execution vulnerability in FreeBSD's NFS server, discovered and exploited by Anthropic's Mythos AI model. Demonstrates AI's capability to…
Langflow Vulnerability CVE-2026-5027 Exploited for Unauthenticated RCE
A high-severity path traversal vulnerability in Langflow, designated CVE-2026-5027 (CVSS 8.8), is being actively exploited in the wild. Discovered by Tenable, the…