Two critical n8n flaws (CVSS 9.4, 9.5) enable RCE via expression sandbox escape and public forms, risking credential exposure.
New ClickFix variant maps WebDAV drive to run trojanized WorkFlowy app, enabling stealth C2 beacon and payload delivery.
Security researchers are detecting hundreds of IP addresses on a daily basis that scan or attempt to exploit Apache RocketMQ services vulnerable to a remote command execution flaw identified as ...
Attackers are using fake Claude Code install pages and malicious search ads to spread infostealer malware targeting Windows ...
The D-Link EXO AX4800 (DIR-X4860) router is vulnerable to remote unauthenticated command execution that could lead to complete device takeovers by attackers with access to the HNAP port. The D-Link ...
ASUS patched a bug that allowed attackers to pair two vulnerabilities to gain direct router access and execute commands as root. ASUS released patches for over a dozen router models on Tuesday that ...