CVE-2026-118601 Alpine iLX-F511 SSH Hard-Coded Credentials Remote Code Execution Vulnerability

Alpine iLX-F511 SSH Hard-Coded Credentials Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this vulnerability. The specific flaw exis...

EUVD-2026-112194

Alpine iLX-F511 SSH Hard-Coded Credentials Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this vulnerability. The specific flaw exis...

CVE-2026-118601

The Alpine iLX-F511 devices are vulnerable to Remote Code Execution (RCE) due to the use of hard-coded credentials within the SSH service . This flaw allows network-adjacent attackers to execute arbitrary code without authentication, specifically in the context of the telechips user . No specific...

CVE-2026-103408

A Stack Buffer Overflow vulnerability exists in the DHCP client of the Juniper Networks Session Smart Router . An unauthenticated attacker on the local network can achieve remote code execution by sending a malicious DHCP reply, specifically by providing attacker-controlled input during the parsi...

CVE-2026-103408 Session Smart Router: An attacker-controlled input causes remote code execution when parsing DHCP options

A Stack Buffer Overflow vulnerability in the DHCP client in Juniper Networks Session Smart Router allows an unauthenticated attacker on the local network to achieve remote code execution via a malicious DHCP reply...

EUVD-2026-112213

A Stack Buffer Overflow vulnerability in the DHCP client in Juniper Networks Session Smart Router allows an unauthenticated attacker on the local network to achieve remote code execution via a malicious DHCP reply...

CVE-2026-44179

XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. From 1.13 until 1.14.5, the excerpt-include macro does not properly escape the included page's title and executes excerpt content with the macro's rights. The title handling in...

PHP2Shell Attack Roots 25 Servers, Breaches U.S. Government-Affiliated Network

Cybersecurity researchers have disclosed details of what appears to be an artificial intelligence AI-assisted attack orchestrated by a suspected China-nexus threat actor that has leveraged the PHP2Shell vulnerabilities to breach exposed systems. The activity, which was observed on October 25, 202...

CVE-2026-44179 XWiki Pro Macros: excerpt-include title and content injection executes code

XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. From 1.13 until 1.14.5, the excerpt-include macro does not properly escape the included page's title and executes excerpt content with the macro's rights. The title handling in...

EUVD-2026-112144

XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. From 1.13 until 1.14.5, the excerpt-include macro does not properly escape the included page's title and executes excerpt content with the macro's rights. The title handling in...

CVE-2026-44179

XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. From 1.13 until 1.14.5, the "excerpt-include" macro does not properly escape the included page's title and executes "excerpt" content with the macro's rights. The title handling in...

CVE-2026-44179

The XWiki Pro Macros plugin (versions 1.13 until 1.14.5) contains a Remote Code Execution (RCE) vulnerability in the excerpt-include macro. The root cause is a failure to properly escape the included page's title in xwiki-pro-macros-ui/src/main/resources/Confluence/Macros/ExcerptInclude.xml, comb...

INE-Host-and-Network-Penetration-Testing-Exploitation-CTFf-1

Host & Network Penetration Testing: Exploitation CTF 1 Ove...

CVE-2026-105420

Wing FTP Server does not verify user's base folder. An attacker with admin privileges can add user directories via scripts, allowing the added directories to escape the base folder. This allows the attacker to write files on the system and can lead to remote code execution with process owner...

CVE-2026-105420 Path Traversal in Wing WFTP Server leading to Remote Code Execution

Wing FTP Server does not verify user's base folder. An attacker with admin privileges can add user directories via scripts, allowing the added directories to escape the base folder. This allows the attacker to write files on the system and can lead to remote code execution with process owner...

CVE-2026-105420

The Wing FTP Server is vulnerable to a path traversal issue (CWE-22) because it fails to verify the user's base folder. An attacker with admin privileges can use scripts to add user directories that escape the base folder. This allows the attacker to write files to the system, potentially leading...

EUVD-2026-112084

Wing FTP Server does not verify user's base folder. An attacker with admin privileges can add user directories via scripts, allowing the added directories to escape the base folder. This allows the attacker to write files on the system and can lead to remote code execution with process owner...

CVE-2026-67074

HCL BigFix AEX is affected by a Remote Code Execution Vulnerability . It may allow attackers to execute code with the privileges of the affected application or service, potentially leading to unauthorized access, data exposure, or system compromise...

Hackers Target Critical Oracle E-Business Suite RCE Flaw Days After Security Patch

Threat actors are beginning to probe for a newly patched critical vulnerability in Oracle E-Business Suite EBS, according to threat intelligence firm Defused Cyber. The vulnerability in question is CVE-2026-101767 CVSS score: 9.8 , a case of improper authentication in the Oracle Application Objec...

EUVD-2026-112029

HCL BigFix AEX is affected by a Remote Code Execution Vulnerability . It may allow attackers to execute code with the privileges of the affected application or service, potentially leading to unauthorized access, data exposure, or system compromise...