Skip to content

malwarechronicle

Breaking

Malware Chronicle Exposure Desk

09 Oct
Vulnerabilities

Update Dromara Skyeye Now: Critical CVE-2026-107780 Enables Unauthenticated Windows Command Execution

A critical flaw in Dromara Skyeye allows attackers to run commands via an unauthenticated TTS endpoint, risking full system compromise on Windows.

09 Oct
Vulnerabilities

Patch league/commonmark to 2.10.2 now to prevent unauthenticated CPU DoS via pipe-free table parsing flaw

Unauthenticated attackers can exhaust server CPU via flawed table parsing in thethpleague commonmark before version 2.10.2.

09 Oct
Vulnerabilities

Mitigate Strapi Admin Data Leak and RCE Chain Before Federal Deadline

CISA adds CVE-2023-22894 to its exploited vulnerabilities catalog, urging developers to mitigate the flaw before the federal deadline.