Browsing: privilege escalation

Top Highlights The TerminalFix campaign uses compromised websites to trigger malicious PowerShell commands via fake…

Fast Facts Critical vulnerabilities in popular WordPress plugins/themes, such as WPMU DEV Dashboard and Avada,…

Summary Points An unauthenticated attacker can exploit CVE-2026-63520 by uploading a malicious Business Data Connectivity…

Summary Points Attackers can exploit SSRF vulnerabilities to access cloud metadata endpoints (169.254.169.254), retrieving sensitive…

Quick Takeaways Critical vulnerabilities in Adobe ColdFusion, Commerce, and Campaign Classic allow for remote code…

Top Highlights Over 40 critical vulnerabilities, including remote code execution (RCE) and privilege escalation flaws,…

Quick Takeaways Attackers can exploit Windows Plug and Play (PnP) to remotely execute SYSTEM-level code…

Top Highlights Attackers exploited a SQL injection vulnerability in a web app’s autocomplete feature to…

Summary Points An unauthenticated local user can exploit CVE-2026-64531 in Linux’s Open vSwitch to achieve…

Top Highlights Modern ransomware groups employ legitimate tools (e.g., Sliver, native admin tools) and compromised…