BADBOX botnet

Android Head Unit Malware Recruits Vehicles into Botnet Diagram illustrating Android head unit malware and the Android head unit malware botnet infection chain

Diagram illustrating Android head unit malware and the Android head unit malware botnet infection chain

Android Head Unit Malware Recruits Vehicles into Botnet

Do Son August 21, 2026

At a glance Factor Details Malware Family JarService dropper and zhima proxy module Threat Actor MoYu Group...

BADBOX Botnet: Pre-installed Malware Targets Android Devices Android BADBOX Botnet

Android BADBOX Botnet

BADBOX Botnet: Pre-installed Malware Targets Android Devices

Do Son February 6, 2025

A new and insidious botnet dubbed BADBOX is infecting hundreds of thousands of Android devices, with the...

BADBOX Botnet Rises Again: 192,000+ Android Devices Compromised

BADBOX Botnet

BADBOX Botnet Rises Again: 192,000+ Android Devices Compromised

Do Son December 18, 2024

The BADBOX botnet is back and more dangerous than ever. Originally thought to have been dismantled, this...

🚨

Receive alerts for vulnerabilities being exploited in the wild.

⚡

Get notified instantly when a Proof of Concept (PoC) exploit is published.

🔍

Access critical info on vulnerabilities even when marked as "RESERVED".

🧠

Insights powered by decades of expertise and global intelligence sources.

🎯

Customize alerts with up to 10 keywords for your specific tech stack.

📊

Export the raw CVE database for SIEM integration and reporting.

CVE-2026-32475CVSS 9.0
Unrestricted Upload of File with Dangerous Type vulnerability in Elementor Elementor Pro allows Using Malicious Files. This issue...
Admin intel📅 Updated: Sep 2, 2026
CVE-2026-83549CVSS 7.8
Post-authentication Improper Neutralization of Special Elements used in an OS Command (\'OS Command Injection\') vulnerability has been identified...
Admin intel📅 Updated: Sep 1, 2026
CVE-2026-83548CVSS 10.0
A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access...
Admin intel📅 Updated: Sep 1, 2026
CVE-2026-0768CVSS 9.8
Langflow code Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on...
Admin intel📅 Updated: Sep 1, 2026
CVE-2026-35029
### Impact The `/config/update endpoint` does not enforce admin role authorization. A user who is already authenticated into...
Admin intel📅 Updated: Sep 1, 2026
CVE-2026-9586CVSS 9.3
An unauthenticated SQL injection vulnerability exists in Sangoma Switchvox SMB Edition 8.3 (104997). The /pa endpoint processes XML content beginning...
Admin intel📅 Updated: Sep 1, 2026
CVE-2026-82329CVSS 9.8
JFrog Artifactory contains an authentication weakness that, under default configuration, may allow an unauthenticated attacker with network access...
Admin intel📅 Updated: Sep 1, 2026
CVE-2026-81578CVSS 8.8
An improper access control vulnerability exists in the web management interface of PaperCut MF and PaperCut NG. Under...
Admin intelCISA KEV📅 Added to KEV: Aug 31, 2026📅 Updated: Aug 28, 2026