attack_type:remote_code_execution × criticity:high × latest_source_host:bleepingcomputer.com × limpar

Resultados

2 casos · pág. 1/1

bleepingcomputer.com · há 6h high

Eye Security remotely disables vulnerable Time4Popcorn updater (CVE-2026-30612) exposing millions of devices to RCE

Researchers at Eye Security neutralized a flaw in the abandoned Time4Popcorn app, a fork of the Popcorn Time BitTorrent client, that let whoever controlled the update domain execute code with elevated privileges. The flaw, tracked as CVE-2026-30612, affects the Windows and macOS updaters. After registering the lapsed domain popcorntimeupd…

CVE-2026-30612 government military

bleepingcomputer.com · há 4d high

Critical BlockStrap flaw (CVE-2026-103849) in Magento and Adobe Commerce enables PHP code execution; exploitation expected

Sansec warns that a maximum-severity flaw, CVE-2026-103849 (dubbed BlockStrap), in Magento Open Source and Adobe Commerce could allow attackers to execute arbitrary PHP code on store servers. No in-the-wild exploitation has been observed yet, but Sansec identified four potential attack paths in under 24 hours and expects mass exploitation…

CVE-2026-103849 e-commerce retail