TL;DR Mitel published two advisories. The first covers a MiCollab command injection bug rated critical at CVSS 9.8, which an unauthenticated attacker can reach over the network. The second covers …

TL;DR: TP-Link patched a TP-Link command injection flaw in the Archer AXE75 V1 router. Tracked as CVE-2026-9044, it carries a CVSS v4.0 score of 8.5. Firmware 1.5.6 Build 20260623 fixes the issue.…

TL;DR Cisco patched seven Cisco IOS XE vulnerability issues in an August 2026 hardening release. Two are Critical, led by CVE-2026-20272 at CVSS 9.8. Cisco found them internally and reports no act…

Author: Nilanjan Chowdhury

A beginner-friendly walkthrough covering web enumeration, command injection, internal service discovery, credential leakage, and privilege…

⚠️ Lab Setup : Everything below was done in a controlled local lab using DVWA (Damn Vulnerable Web Application) for practice and…

TL;DR Two critical Puwell IP Camera vulnerabilities now have public details and proof-of-concept exploit code. Both score 9.3 on the CVSS scale. Together they let a remote attacker bypass login an…

TL;DR Dell patched two critical flaws in Virtual Storage Integrator (VSI) for VMware vSphere Client. The worst, CVE-2026-67261, allows unauthenticated remote code execution as root, scoring CVSS 9…

TL;DR TP-Link disclosed five vulnerabilities across its ISP-managed networking gear. The flaws hit mesh systems, routers, PON devices, and xDSL modems. The worst allow authentication bypass and co…