#commands


Ruflo MCP Flaw Lets Unauthenticated Attackers Run Commands and Poison AI Memory

Jul 29, 2026 // 19:50

Cybersecurity researchers have flagged a maximum-severity security flaw in Ruflo, an open-source agent meta-harness for Anthropic Claude Code and OpenAI Codex, that could result in […]

New Gitea RCE Lets Repository Writers Plant a Git Hook to Run Shell Commands

Jul 29, 2026 // 10:50

Gitea, the self-hosted Git platform, has patched a critical remote code execution vulnerability. A user with ordinary repository write access can turn attacker-controlled patch content […]

Critical TeamCity Flaw Could Let Attackers Run OS Commands Without Logging In

Jul 28, 2026 // 11:21

JetBrains is urging customers of on-premise versions of TeamCity to update to the latest version following the discovery of a critical security issue that could […]

n8n Sandbox Escape Lets Workflow Editors Run OS Commands as the n8n Process

Jul 27, 2026 // 16:10

n8n has patched a high-severity expression-sandbox escape that could let an authenticated workflow editor execute operating-system commands on the server running the automation platform. Security […]

Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git

Jul 25, 2026 // 12:10

Security researcher Yuhang Wu at depthfirst has published a working proof-of-concept (PoC) exploit that executes commands as git on an unpatched self-managed GitLab 18.11.3 server. […]

Bing Images Flaws Let Crafted SVGs Run Commands as SYSTEM on Microsoft’s Servers

Jul 24, 2026 // 15:01

A crafted SVG submitted to Bing’s image search ran commands as NT AUTHORITY\SYSTEM on Microsoft’s production image-processing workers, and as root on the Linux machines […]

New TELEPUZ Malware Spreads via ClickFix to Steal Data and Run Commands

Jul 16, 2026 // 15:57

Cybersecurity researchers have called attention to a new modular malware called TELEPUZ that’s been spreading via websites infected with ClickFix lures since late April 2026. […]

New Agent Data Injection Attack Can Make AI Agents Misclick or Run Attacker Commands

Jul 16, 2026 // 15:17

Ask an AI agent to summarize the reviews on a product page, and a single planted review can make it click “Buy Now” instead. Ask […]

Two SonicWall SMA 1000 Zero-Days Exploited, One Could Enable Admin Commands

Jul 15, 2026 // 08:37

SonicWall has warned of active exploitation of two zero-day vulnerabilities impacting Secure Mobile Access (SMA) 1000 series appliances, one of which could be exploited to […]

Critical Cursor Flaws Could Let Prompt Injection Escape Sandbox and Run Commands

Jul 2, 2026 // 02:17

Two flaws in Cursor, an AI code editor, could let a single, ordinary-looking prompt break out of the editor’s safety sandbox and run any command […]