Skip to content
June 28, 2026
  • Linkedin
  • Twitter
  • Facebook
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Watchtower
  • Cyber Criminals
  • Data Leak
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Vulnerability Report
Light/Dark Button
The Hidden Cyber Trap: How Compromised Websites and Malicious AdTech Manipulate Users Malicious AdTech
  • Cyber Security

The Hidden Cyber Trap: How Compromised Websites and Malicious AdTech Manipulate Users

Do Son February 2, 2025 0
Read More Read more about The Hidden Cyber Trap: How Compromised Websites and Malicious AdTech Manipulate Users
CVE-2025-0851 (CVSS 9.8): Deep Java Library Vulnerability Allows Path Traversal Exploits CVE-2025-0851
  • Vulnerability

CVE-2025-0851 (CVSS 9.8): Deep Java Library Vulnerability Allows Path Traversal Exploits

Do Son February 2, 2025 0
Read More Read more about CVE-2025-0851 (CVSS 9.8): Deep Java Library Vulnerability Allows Path Traversal Exploits
SparkRAT: A Persistent Cross-Platform Cyber Threat Targeting macOS and Beyond Mercenary Akula European Financial Targeting AI-Generated Malware React2Shell Exploit UAT-8837 Critical Infrastructure Attack APT36, BOSS Linux BRICKSTORM Malware, China Espionage Curly COMrades, MucorAgent Chinese APT - HTTP Client Tools Shuckworm Cyber Espionage
  • Cyber Security
  • Malware

SparkRAT: A Persistent Cross-Platform Cyber Threat Targeting macOS and Beyond

Do Son February 2, 2025 0
Read More Read more about SparkRAT: A Persistent Cross-Platform Cyber Threat Targeting macOS and Beyond
.Gov No More: Government Domains Weaponized in Phishing Surge Layoff Phishing Scam Remcos RAT Malware Aruba Phishing, Phishing-as-a-Service PyPI, phishing CVE-2024-25608 PyPI Phishing, Credential Theft
  • Cyber Security
  • Vulnerability

.Gov No More: Government Domains Weaponized in Phishing Surge

Do Son February 2, 2025 0
Read More Read more about .Gov No More: Government Domains Weaponized in Phishing Surge
Unrestricted Access: A Simple Web Misconfiguration Exposes Critical Data Web Misconfiguration
  • Data Leak

Unrestricted Access: A Simple Web Misconfiguration Exposes Critical Data

Do Son February 2, 2025 0
Read More Read more about Unrestricted Access: A Simple Web Misconfiguration Exposes Critical Data
CISA Warns of Hidden Backdoor in Contec CMS8000 Patient Monitors Contec CMS8000 backdoor - CVE-2025-0626 ,CVE-2025-0683
  • Vulnerability

CISA Warns of Hidden Backdoor in Contec CMS8000 Patient Monitors

Do Son February 2, 2025 0
Read More Read more about CISA Warns of Hidden Backdoor in Contec CMS8000 Patient Monitors
Adversarial Misuse of Generative AI: How APTs Are Experimenting with AI for Cyber Operations illegal streaming networks complex criminal enterprises UAT-7290 China-nexus Espionage Adversarial Misuse of Generative AI
  • Cyber Security

Adversarial Misuse of Generative AI: How APTs Are Experimenting with AI for Cyber Operations

Do Son February 1, 2025 0
Read More Read more about Adversarial Misuse of Generative AI: How APTs Are Experimenting with AI for Cyber Operations
CVE-2024-56529: mailcow Patches Session Fixation Vulnerability in Web Panel CVE-2024-56529 - CVE-2025-25198
  • Vulnerability

CVE-2024-56529: mailcow Patches Session Fixation Vulnerability in Web Panel

Do Son February 1, 2025 0
Read More Read more about CVE-2024-56529: mailcow Patches Session Fixation Vulnerability in Web Panel
Fake Game Hacks on YouTube Target Kids with Malware Fake Game Hacks
  • Malware

Fake Game Hacks on YouTube Target Kids with Malware

Do Son February 1, 2025 0
Read More Read more about Fake Game Hacks on YouTube Target Kids with Malware
CVE-2025-24480 (CVSS 9.8): Rockwell Automation Addresses Critical Flaw in FactoryTalk View ME Rockwell Automation Warning OT Security Rockwell SQLi, Industrial Safety DoS Verve Asset Manager API OT Privilege Escalation Rockwell NAT Router, Critical Auth Bypass Rockwell ICS Privilege Escalation, MSI Repair Attack CVE-2025-7353 Critical vulnerability, industrial control systems Rockwell vulnerability, ICS security Rockwell Arena, Memory Abuse Rockwell Automation, RCE Vulnerability CVE-2025-24479 and CVE-2025-24480 - CVE-2025-0477
  • Vulnerability

CVE-2025-24480 (CVSS 9.8): Rockwell Automation Addresses Critical Flaw in FactoryTalk View ME

Do Son February 1, 2025 0
Read More Read more about CVE-2025-24480 (CVSS 9.8): Rockwell Automation Addresses Critical Flaw in FactoryTalk View ME
Best Cloud Mining Platform in 2025, Easily Earn $30,000 Daily CVE-2024-55563 - transaction-relay jamming attack
  • Technique

Best Cloud Mining Platform in 2025, Easily Earn $30,000 Daily

Do Son February 1, 2025 0
Read More Read more about Best Cloud Mining Platform in 2025, Easily Earn $30,000 Daily
CVE-2024-55417: One-Click RCE Vulnerability in Voyager Admin Panel, No Patch CVE-2024-55417
  • Vulnerability

CVE-2024-55417: One-Click RCE Vulnerability in Voyager Admin Panel, No Patch

Do Son January 31, 2025 0
Read More Read more about CVE-2024-55417: One-Click RCE Vulnerability in Voyager Admin Panel, No Patch
Cyber Espionage and Influence: Unmasking APT28’s Tactics Sources and related content APT28 report
  • Cyber Security

Cyber Espionage and Influence: Unmasking APT28’s Tactics Sources and related content

Do Son January 31, 2025 0
Read More Read more about Cyber Espionage and Influence: Unmasking APT28’s Tactics Sources and related content
CVE-2024-7695: Moxa Patches Critical Denial-of-Service Vulnerability in PT Switches Moxa Hard-Coded Credentials, Critical JWT Bypass CVE-2024-9137 and CVE-2024-9139 - CVE-2024-12297 CVE-2024-7695 CVE-2024-9404 CVE-2024-12297 CVE-2025-0415
  • Vulnerability

CVE-2024-7695: Moxa Patches Critical Denial-of-Service Vulnerability in PT Switches

Do Son January 31, 2025 0
Read More Read more about CVE-2024-7695: Moxa Patches Critical Denial-of-Service Vulnerability in PT Switches
CVE-2024-53704 – Authentication Bypass in SonicOS: PoC Published CVE-2024-53704 PoC exploit
  • Vulnerability

CVE-2024-53704 – Authentication Bypass in SonicOS: PoC Published

Do Son January 30, 2025 0
Read More Read more about CVE-2024-53704 – Authentication Bypass in SonicOS: PoC Published
D-Link Patches Critical Remote Code Execution Vulnerability in DSL-3788 Router CVE-2024-57376 - DSL-3788 Router Vulnerability
  • Vulnerability

D-Link Patches Critical Remote Code Execution Vulnerability in DSL-3788 Router

Do Son January 30, 2025 0
Read More Read more about D-Link Patches Critical Remote Code Execution Vulnerability in DSL-3788 Router
Google Play Protect: Safeguarding Billions of Users in 2024 Google Play Protect
  • Android
  • Technology

Google Play Protect: Safeguarding Billions of Users in 2024

Do Son January 30, 2025 0
Read More Read more about Google Play Protect: Safeguarding Billions of Users in 2024
Zero-Day Alert: Mirai Botnet Exploiting Unpatched Zyxel CPE Vulnerability (CVE-2024-40891) Weaver E-cology RCE CVE-2026-22679 CVE-2026-20127 Cisco SD-WAN Exploitation AI-Driven Cyberattack ARXON Malware React Server Components Vulnerability CVE-2025-55182 FortiWeb Auth Bypass, Unauthenticated Admin Takeover RayInitiator Bootkit, LINE VIPER CVE-2025-59689 Department of the Treasury cybersecurity - CVE-2025-0108 PoC CVE-2025-31103 Dior Data Breach SK Telecom data breach, long-term intrusion
  • Vulnerability

Zero-Day Alert: Mirai Botnet Exploiting Unpatched Zyxel CPE Vulnerability (CVE-2024-40891)

Do Son January 30, 2025 0
Read More Read more about Zero-Day Alert: Mirai Botnet Exploiting Unpatched Zyxel CPE Vulnerability (CVE-2024-40891)
CVE-2024-23953 and CVE-2024-29869: Apache Hive Patches Two Important Security Flaws CVE-2024-23953 and CVE-2024-29869
  • Vulnerability

CVE-2024-23953 and CVE-2024-29869: Apache Hive Patches Two Important Security Flaws

Do Son January 30, 2025 0
Read More Read more about CVE-2024-23953 and CVE-2024-29869: Apache Hive Patches Two Important Security Flaws
Phorpiex Botnet Now Deploying LockBit Ransomware in Automated Attacks Phorpiex botnet Attack
  • Malware

Phorpiex Botnet Now Deploying LockBit Ransomware in Automated Attacks

Do Son January 30, 2025 0
Read More Read more about Phorpiex Botnet Now Deploying LockBit Ransomware in Automated Attacks
❮ Prev Page
Next Page ❯

Search

Translation

CVE WATCHTOWER
🚨

Receive alerts for vulnerabilities being exploited in the wild.

⚡

Get notified instantly when a Proof of Concept (PoC) exploit is published.

🔍

Access critical info on vulnerabilities even when marked as "RESERVED".

🧠

Insights powered by decades of expertise and global intelligence sources.

🎯

Customize alerts with up to 10 keywords for your specific tech stack.

📊

Export the raw CVE database for SIEM integration and reporting.

Upgrade Package

🚨 Active Exploits in the Wild

  • CVE-2026-28496CVSS 9.4
    FOSSBilling is a free, open-source billing and client management system. Versions prior to 0.8.0 have a Server-Side Template...
    Admin intel🗓 Updated: Jun 25, 2026
  • CVE-2026-12569
    PTC Windchill and FlexPLM contains an improper input validation vulnerability allowing an unauthenticated, remote attacker to execute arbitrary...
    🗓 Added to KEV: Jun 25, 2026
  • CVE-2025-67038CVSS 9.8
    Lantronix EDS5000 contains a code injection vulnerability that could allow attackers to inject arbitrary OS commands into the...
    🗓 Added to KEV: Jun 23, 2026
  • CVE-2026-34910CVSS 10.0
    Ubiquiti UniFi OS contains an improper input validation vulnerability which could allow a malicious actor with access to...
    🗓 Added to KEV: Jun 23, 2026
  • CVE-2026-34909CVSS 10.0
    Ubiquiti UniFi OS contains a path traversal vulnerability which could allow a malicious actor with access to the...
    🗓 Added to KEV: Jun 23, 2026
  • CVE-2026-34908CVSS 10.0
    Ubiquiti UniFi OS contains an improper access control vulnerability which could allow a malicious actor with access to...
    🗓 Added to KEV: Jun 23, 2026
  • CVE-2026-20230CVSS 8.6
    A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified...
    Admin intel🗓 Updated: Jun 22, 2026
  • CVE-2026-20253CVSS 9.8
    Splunk Enterprise contains a missing authentication for critical function vulnerability which could allow an unauthenticated user to create...
    🗓 Added to KEV: Jun 18, 2026
Powered by CVE Watchtower

🔴 Live Critical Threats

  • CVE-2026-58053CVSS 9.9
    Gitea act_runner with the Docker backend (through act 0.262.0) passes a workflow's...
  • CVE-2026-12415CVSS 9.8
    The Invoice Generator plugin for WordPress is vulnerable to privilege escalation due...
  • CVE-2026-28701CVSS 9.8
    Various versions of Daktronics Controller Firmware could allow authenticated and unauthenticated remote...
  • CVE-2026-53576CVSS 10.0
    Kestra is an open-source, event-driven orchestration platform. Prior to 1.0.45 and 1.3.21,...
  • CVE-2026-49869CVSS 10.0
    Kestra is an open-source, event-driven orchestration platform. Prior to 1.0.45 and 1.3.21,...
  • CVE-2026-54350CVSS 10.0
    Budibase is an open-source low-code platform. Prior to 3.39.12, an unauthenticated visitor...
  • CVE-2026-54352CVSS 9.6
    Budibase is an open-source low-code platform. Prior to 3.39.9, `POST /api/pwa/process-zip` at...
  • CVE-2026-52785CVSS 9.9
    OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1,...
  • CVE-2026-52782CVSS 9.9
    OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1,...
  • CVE-2026-52780CVSS 9.6
    OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1,...
Powered by CVE WATCHTOWER

Our Websites
  • Penetration Testing Tools
  • The Daily Information Technology
  • Daily CyberSecurity

    • About SecurityOnline.info
    • Advertise with us
    • Announcement
    • Contact
    • Contributor Register
    • Login
    • Disclaimer
    • Privacy Policy
    • About SecurityOnline.info
    • Advertise on SecurityOnline.info
    • Contact Us

    When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

    • Disclaimer
    • Privacy Policy
    • DMCA NOTICE
    • Linkedin
    • Twitter
    • Facebook
    • Youtube
    © 2017 - 2026 Daily CyberSecurity. All Rights Reserved.