CVE-2026-79946

Dell SCG 5.0 (Secure Connect Gateway) is affected by an Improper Neutralization of Alternate XSS Syntax vulnerability in both the Appliance and Application versions. The affected versions are prior to 5.36.00.16 (Appliance) and prior to 5.36.00.00 (Application). An unauthenticated attacker with r...

CVE-2026-79741

Dell Secure Connect Gateway (SCG) 5.0 Appliance versions prior to 5.36.00.16 and Application versions prior to 5.36.00.00 are affected by a Command Injection vulnerability (Improper Neutralization of Special Elements used in a Command). An unauthenticated attacker with remote network access could...

CVE-2026-79741

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability. An unauthenticated attacker with remote access could potentially exploit this...

EUVD-2026-75045

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability. An unauthenticated attacker with remote access could potentially exploit this...

CVE-2026-79741

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability. An unauthenticated attacker with remote access could potentially exploit this...

CVE-2026-79689

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. An unauthenticated attacker with remote access could potentially explo...

CVE-2026-79689

Dell Secure Connect Gateway (SCG) 5.0 contains an OS Command Injection vulnerability in both the Appliance and Application editions, affecting versions prior to 5.36.00.16 (Appliance) and 5.36.00.00 (Application). An unauthenticated attacker with remote access can exploit the flaw to achieve scri...

CVE-2026-79689

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. An unauthenticated attacker with remote access could potentially explo...

EUVD-2026-75044

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. An unauthenticated attacker with remote access could potentially explo...

EUVD-2026-75043

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability. An unauthenticated attacker with remote access could potentially exploit this...

CVE-2026-79941

Dell Secure Connect Gateway (SCG) 5.0 Appliance versions prior to 5.36.00.16 and Application versions prior to 5.36.00.00 are affected by a Command Injection vulnerability (improper neutralization of special elements). An unauthenticated attacker with remote access could exploit this to achieve s...

CVE-2026-79941

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability. An unauthenticated attacker with remote access could potentially exploit this...

CVE-2026-79941

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability. An unauthenticated attacker with remote access could potentially exploit this...

The Models That Found 10,000 Zero-Days Broke Into Three Companies Using Weak Passwords

The question of whether a Frontier AI model could find vulnerabilities that no human researcher had found was settled in April. Claude Mythos Preview identified thousands of previously unknown flaws across every major operating system and browser, including a 27-year-old denial-of-service conditi...

crypto-scanner

Сканируйте свою кодовую базу на предмет уязвимой к квантовым атакам криптографии, пока не стало слишком поздно. Быстрый старт • Почему квантовая готовность? • Использование • Уровни риска • CI/CD • О нас Обзор Crypto Scanner — это CLI-инструмент, который сканирует вашу кодовую базу на наличие...

CVE-2026-79971

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Sanitization of Custom Special Characters vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to scri...

react2shell-CVE-2025-55182-full-rce-script

Next.js React2Shell CVE-2025-55182 エクスプロイトツール 認可されたローカルテスト環境のみで、重大な React2Shell 脆弱性 CVE-2025-55182 / CVE-2025-66478 を実証するための Proof-of-Concept ツールです。 ⚠️ 重大な警告: 活発な悪用が進行中 この脆弱性 CVSS 10.0 は、高度な脅威アクターによって活発に悪用されています。 Amazon Threat Intelligence は、Earth Lamia や Jackpot Panda...

CVE-2025-41089

CVE-2025-41089: Xibo CMS의 반사형 XSS 저는 Xibo CMS v4.1.2 에서 반사형 크로스사이트 스크립팅XSS 취약점을 발견했습니다. 이 문제는 템플릿 편집기의 특정 위젯에 있는 'Configuration Name' 필드에서 사용자가 제공한 입력을 애플리케이션이 제대로 삭제하지 못하는 데서 비롯됩니다. 공격자는 특수 링크를 제작하거나 이 필드에 악성 스크립트를 주입하는 작업을 트리거할 수 있습니다. 사용자가 영향을 받는 페이지와 상호작용하면 스크립트가 서버에서 반사되어 피해자의 브라우저에서 실행됩니다. ...

droidground v1.0.15

DroidGround Website | Demo In traditional CTF challenges , it's common to hide flags in files on a system, requiring attackers to exploit vulnerabilities to retrieve them. However, in the Android world, this approach doesn't work well. APK files are easily downloadable and reversible, so placing ...

CVE-2026-61911

Sieve mailbox existence oracle: An authenticated user could install a Sieve script that probed whether another user's private mailbox existed, or read the value of shared mailbox annotations, by observing which fileinto branch fired during LMTP delivery...