https://0daynews.com/articles/2026-07-06-gitea-docker-cve-2026-20896-header-auth-bypass/ 0dayNews en 2026-07-06T18:20:00.000Z Gitea CVE-2026-20896: Docker default trusts any X-WEBAUTH-USER — probing observed Gitea, CVE-2026-20896, Docker, reverse-proxy, X-WEBAUTH-USER, authentication-bypass, self-hosted https://0daynews.com/articles/2026-07-06-trojpix-air-gap-video-cable-emanation-shandong/ 0dayNews en 2026-07-06T15:00:00.000Z TrojPix: air-gap exfil via video-cable RF emanation TrojPix, air-gap, side-channel, TEMPEST, electromagnetic emanation, Shandong University, ICS-OT https://0daynews.com/articles/2026-07-06-trojpix-air-gap-video-cable-emanation-shandong/cover.jpg TrojPix: air-gap exfil via video-cable RF emanation https://0daynews.com/articles/2026-07-06-adobe-coldfusion-cve-2026-48282-active-exploitation/ 0dayNews en 2026-07-06T14:15:00.000Z Adobe ColdFusion CVE-2026-48282 hits CVSS 10 — active exploitation confirmed Adobe, ColdFusion, CVE-2026-48282, path-traversal, RCE, active-exploitation, APSB26-68 https://0daynews.com/articles/2026-07-06-operation-dragonreturn-china-nexus-dcrat-india-tax/ 0dayNews en 2026-07-06T13:20:00.000Z Operation DragonReturn drops DcRAT on Indian taxpayers, Silver Fox overlaps Operation DragonReturn, DcRAT, Silver Fox, Seqrite Labs, India, spear-phishing, DLL sideloading https://0daynews.com/articles/2026-07-06-gitlab-exiftool-rce-cve-2021-22205/ 0dayNews en 2026-07-06T13:00:00.000Z GitLab's ExifTool RCE: A Patch That Sat Unrecognized for Months CVE-2021-22205, GitLab, ExifTool, remote code execution, patch adoption gap https://0daynews.com/articles/2026-07-06-gitlab-exiftool-rce-cve-2021-22205/cover.jpg GitLab's ExifTool RCE: A Patch That Sat Unrecognized for Months https://0daynews.com/articles/2026-07-06-quimarat-java-cross-platform-maas-levelblue/ 0dayNews en 2026-07-06T13:00:00.000Z QuimaRAT: a Java RAT MaaS that covers Windows, Linux, and macOS for $150 QuimaRAT, LevelBlue, malware-as-a-service, cross-platform RAT, Java malware, SmartScreen bypass, MaaS pricing https://0daynews.com/articles/2026-07-06-quimarat-java-cross-platform-maas-levelblue/cover.jpg QuimaRAT: a Java RAT MaaS that covers Windows, Linux, and macOS for $150 https://0daynews.com/articles/2026-07-06-opera-gx-mods-auto-install-flaw-patched/ 0dayNews en 2026-07-06T09:20:00.000Z Opera GX patches auto-install mods flaw — update to 130.0.5847.89 Opera GX, browser, mods, CSS-injection, XS-Leak, Bugcrowd, patch https://0daynews.com/articles/2026-07-06-skillcloak-scanners-miss-agent-skill-malware-hkust/ 0dayNews en 2026-07-06T08:15:00.000Z SkillCloak paper: static scanners miss 90%+ of agent skill malware SkillCloak, agent-skills, marketplace, static-scanning, HKUST, SkillDetonate, ClawHub https://0daynews.com/articles/2026-07-05-flipper-zero-firmware-maintenance-only-community-driven/ 0dayNews en 2026-07-05T17:20:00.000Z Flipper Zero firmware goes maintenance-only — the honest timeline Flipper Zero, Flipper Devices, firmware, open source, red team tooling, community maintenance https://0daynews.com/articles/2026-07-05-flipper-zero-firmware-maintenance-only-community-driven/cover.jpg Flipper Zero firmware goes maintenance-only — the honest timeline https://0daynews.com/articles/2026-07-05-barracuda-esg-zero-day-cve-2023-2868/ 0dayNews en 2026-07-05T15:30:00.000Z Barracuda Told Customers to Replace Their Appliances, Not Just Patch Them. Here's Why. CVE-2023-2868, Barracuda ESG, Email Security Gateway, appliance replacement, persistent backdoor https://0daynews.com/articles/2026-07-05-barracuda-esg-zero-day-cve-2023-2868/cover.jpg Barracuda Told Customers to Replace Their Appliances, Not Just Patch Them. Here's Why. https://0daynews.com/articles/2026-07-05-jfrog-rollup-polyfill-npm-six-packages-follow-up/ 0dayNews en 2026-07-05T15:20:00.000Z Four more Rollup polyfill typosquats surface in JFrog's fuller DPRK writeup npm, supply-chain, DPRK, North Korea, Rollup, JFrog, Lazarus, typosquatting, BeaverTail https://0daynews.com/articles/2026-07-05-jfrog-rollup-polyfill-npm-six-packages-follow-up/cover.jpg Four more Rollup polyfill typosquats surface in JFrog's fuller DPRK writeup https://0daynews.com/articles/2026-07-05-winrar-path-traversal-cve-2023-38831/ 0dayNews en 2026-07-05T13:00:00.000Z The WinRAR Bug That Hid a Malicious Script Behind a Fake Photo CVE-2023-38831, WinRAR, RARLAB, path traversal, spoofed file extension https://0daynews.com/articles/2026-07-05-winrar-path-traversal-cve-2023-38831/cover.jpg The WinRAR Bug That Hid a Malicious Script Behind a Fake Photo