Netlas.io

High-severity LPE in Exim, no CVE assigned yet 🤷 ‍ A new vulnerability in Exim allows a local attacker to read files outside the mail spool. This could lead to privilege escalation. Search at Netlas.io : 👉 Link: https://nt.ls/qEnbs 👉 Dork: tag.name :"exim" Vendor's advisory: https://www.exim.org/static/doc/security/…

CVE-2026-61511: Pre-auth RCE vulnerability in vBulletin, 9.3 rating 🔥 The vulnerability allows unauthenticated attacker to run arbitrary PHP code as the web server, which can mean full site takeover. PoC is now available! Search at Netlas.io : 👉 Link: https://nt.ls/c7BPf 👉 Dork: tag.name :"vbulletin" Read more: http…

CVE-2026-16812: OS Command injection in VeloCloud Orchestrator, 10.0 rating ‍ 🔥 A new vulnerability in Arista VeloCloud Orchestrator (VCO) allows an unauthenticated remote attacker run OS commands on the VCO host. A compromise can also expose managed devices. This vulnerability is already being actively exploited in t…

Command injection in Mittel MiCollab, no CVE assigned yet, 9.8 rating ‍ 🔥 A command injection vulnerability has been discovered in the AWV component of Mitel MiCollab. A successful exploit of this vulnerability could allow an attacker to execute arbitrary commands and potentially gain control of the system. Search at …

CVE-2026-56846, CVE-2026-56848 & CVE-2026-58043 and other: 3 high-severity and 8 medium or low vulnerabilities in Node.js ‍ 🔥 Recently disclosed vulnerabilities in Node.js touch HTTP/2, the Permission Model, and several core modules. Search at Netlas.io : 👉 Link: https://nt.ls/AAg1f 👉 Dork: tag.name :"node_js" Vendo…