/
ttps_attack:T1059.004 × latest_source_host:gbhackers.com × limpar

Resultados

2 casos · pág. 1/1

gbhackers.com · · 2 fontes · 2 atualizações critical

Horizon3.ai publishes public PoC for FortiSIEM unauthenticated RCE CVE-2026-106173 via phQueryMaster gRPC file overwrite

Horizon3.ai has released a public proof-of-concept exploit for CVE-2026-106173, a critical flaw in Fortinet FortiSIEM that lets unauthenticated attackers turn an arbitrary file write into remote code execution. Researcher Zach Hanley published the technical analysis on October 20, following Fortinet's advisory FG-IR-26-180 of October 13. …

CVE-2026-106173
gbhackers.com · critical

Zimbra Collaboration Suite zero-click command injection CVE-2026-73570 exploited to take over email servers

Microsoft Threat Intelligence reports active exploitation of CVE-2026-73570, a command injection flaw in Zimbra Collaboration Suite that allows unauthenticated, zero-click compromise of internet-facing email servers. Attackers deployed webshells, escalated privileges, harvested authentication secrets and staged mailbox data across organiz…

CVE-2026-73570