In-Memory Payloads

Operation DualScript Bypasses Defenses to Hijack Crypto and Cash

AccountDumpling Phishing Google AppSheet Abuse AI-Generated Malware PureRAT Campaign RondoDoX Botnet, Next.js React2Shell EchoGather, Paper Werewolf Salt Typhoon, Telecom Espionage BreachForums, Conor Fitzpatrick Ransomware Negotiation, DOJ Investigation MirrorFace group - Earth Kasha Emperor Dragonfly

Operation DualScript Bypasses Defenses to Hijack Crypto and Cash

Do Son April 6, 2026

Operation DualScript uses parallel execution to bypass defenses, hijacking crypto wallets and banking data via RetroRAT and clipboard swapping.

📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

or try free for 14 days →

CVE-2026-116606CVSS 9.3
An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to...
Admin intel📅 Updated: Nov 10, 2026
CVE-2026-125350
Use after free in XML. Reported by anonymous on 2026-11-06. Google is aware that an exploit for CVE-2026-125350...
Admin intel📅 Updated: Nov 10, 2026
CVE-2026-123751CVSS 9.8
The WP Duplicate WordPress plugin through 1.1.11 does not properly verify a request authentication value and does not...
Watchtower Verified📅 Updated: Nov 9, 2026
CVE-2026-111793CVSS 4.3
Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted....
Admin intel📅 Updated: Nov 9, 2026
CVE-2026-114713CVSS 8.6
The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing...
Admin intel📅 Updated: Nov 9, 2026
CVE-2026-116779CVSS 9.8
Summary `sofia_presence_handle_sip_i_message()` splits the To user of an inbound SIP MESSAGE on `+` and treats the left half...
CISA KEV📅 Added to KEV: Nov 9, 2026
CVE-2026-102895CVSS 9.8
GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0,...
CISA KEV📅 Added to KEV: Nov 9, 2026
CVE-2026-123158CVSS 8.1
sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for...
CISA KEV📅 Added to KEV: Nov 9, 2026

CVE-2026-91241CVSS 9.1
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web Administration). Supported versions...
📅 Updated: Nov 10, 2026
CVE-2026-121683CVSS 9.4
Missing authentication in Ivanti Cloud Services Application version 5.0.8 allows a remote unauthenticated attacker to add and delete...
📅 Updated: Nov 10, 2026
CVE-2026-83283CVSS 9.8
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security). The supported version...
📅 Updated: Nov 10, 2026
CVE-2026-108186CVSS 9.6
Improper Input Validation in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalation of...
📅 Updated: Nov 10, 2026
CVE-2026-121653CVSS 9.8
SQL injection in the Core of Ivanti Endpoint Manager before version 2024 SU8 allows a remote unauthenticated attacker...
📅 Updated: Nov 10, 2026
CVE-2026-125758CVSS 9.1
Aptabase before commit 61d4c01 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge sign-in links by...
📅 Updated: Nov 10, 2026
CVE-2026-125757CVSS 9.4
mailcow: dockerized before 2026-11 contains a server-side template injection vulnerability that allows domain administrators to execute commands in...
📅 Updated: Nov 10, 2026
CVE-2026-124917CVSS 9.6
Sandbox escape due to use-after-free in the Widget: Gtk component. This vulnerability was fixed in Firefox 160 and...
📅 Updated: Nov 10, 2026