Vulnerabilities
Unpatched TRENDnet routers enable remote OS command injection via web backend flaw
A public exploit targets outdated TRENDnet hardware via a web backend flaw, with no patches available for these discontinued devices.
command injection
Everything Payload Report has reported about command injection: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Apache Struts RCE via DMI: Agencies Must Patch CVE-2016-3081 by Oct 11 After KEV Catalog Listing
Federal agencies must address CVE-2016-3081 in Apache Struts by mid-October following its addition to the Known Exploited Vulnerabilities catalog.