Skip to content
November 10, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
Light/Dark Button
SecPod launches Saner Cloud: A Revolutionary CNAPP For Preventive Cybersecurity DSC07167_1_17423842189imlMarwRN
  • Press Release

SecPod launches Saner Cloud: A Revolutionary CNAPP For Preventive Cybersecurity

cybernewswire March 19, 2025 0
Bengaluru, India, 19th March 2025, CyberNewsWire
Read More Read more about SecPod launches Saner Cloud: A Revolutionary CNAPP For Preventive Cybersecurity
SpyCloud’s 2025 Identity Exposure Report Reveals the Scale and Hidden Risks of Digital Identity Threats SpyCloud_wordmark_square_1741882258myhoT5FO0l
  • Press Release

SpyCloud’s 2025 Identity Exposure Report Reveals the Scale and Hidden Risks of Digital Identity Threats

cybernewswire March 19, 2025 0
Austin, TX, United States, 19th March 2025, CyberNewsWire
Read More Read more about SpyCloud’s 2025 Identity Exposure Report Reveals the Scale and Hidden Risks of Digital Identity Threats
CVE-2024-11131 (CVSS 9.8): Critical Vulnerability Found in Synology Camera Firmware Synology Chat Server vulnerabilities Synology security update Synology DSM Update NAS Security Vulnerability Synology VPN Update SSL VPN Vulnerability Synology Telnet Flaw DSM Security Update Synology DSM Telnet vulnerability BeeStation Zero-Day, Pwn2Own RCE CVE-2024-11131 & CVE-2024-10442 CVE-2025-2848 Synology, NAS
  • Vulnerability

CVE-2024-11131 (CVSS 9.8): Critical Vulnerability Found in Synology Camera Firmware

Do Son March 19, 2025 0

Learn about CVE-2024-11131, a critical vulnerability in Synology cameras that allows remote code execution.

CVE-2025-0755: MongoDB C Driver Vulnerability Could Lead to Buffer Overflow MongoDB Vulnerability CVE-2026-25611 MongoDB zlib vulnerability, CVE-2025-14847 MongoDB Vulnerabilities, Data Access CVE-2024-6376 CVE-2025-0755
  • Vulnerability

CVE-2025-0755: MongoDB C Driver Vulnerability Could Lead to Buffer Overflow

Do Son March 19, 2025 0

CVE-2025-0755 revealed: discover how a buffer overflow vulnerability can impact your MongoDB applications and what to do.

CERT-UA Alert: DarkCrystal RAT Deployed via Signal in Ukraine DarkCrystal RAT
  • Malware

CERT-UA Alert: DarkCrystal RAT Deployed via Signal in Ukraine

Do Son March 19, 2025 0

Stay informed about the DarkCrystal RAT threat targeting Ukraine's defense sector and learn how to protect yourself from cyberattacks.

CVE-2024-10441 (CVSS 9.8): Synology Patches Critical Code Execution Flaw in Multiple Products shell-quote command injection AI-Driven Vulnerabilities Q1 2026 Cyber Threats vm2 Sandbox Escape Node.js RCE upKeeper Privilege Escalation CVE-2026-2449 Pharos Controls Vulnerability Root Access Exploit Cybersecurity Vulnerability Roundup CVSS 10.0 Flaws Shadow Archives CVE-2026-0866 MS-Agent Prompt Injection CVE-2026-2256 basic-ftp Path Traversal CVE-2026-27699 telnetd Root Vulnerability CVE-1999-0073 Regression USR-W610 Vulnerabilities End-of-Life IoT Security IceWarp Security Update IceWarp Vulnerabilities Airleader Master Vulnerability CVE-2026-1358 ZLAN5143D Vulnerability CISA ICS Advisory Acronis Cyber Protect Vulnerability CVE-2025-30411 WAGO 852 Vulnerability OT Network Security SandboxJS Vulnerability Sandbox Escape (CVSS 10.0) Kubernetes Local Path Provisioner CVE-2025-62878 CISA Unresponsive Vendors Avation & RISS Vulnerabilities KiloView Vulnerability CVE-2026-1453 OpenClaw RCE vulnerability Johnson Controls Vulnerability CVE-2025-26385 SandboxJS Vulnerability CVE-2026-23830 ibaPDA Vulnerability CVE-2025-14988 Protobuf Vulnerability CVE-2026-0994 AVEVA Process Optimization Vulnerability CVE-2025-61937 ConnectWise PSA Vulnerability CVE-2026-0695 Aruba VIA Vulnerability CVE-2025-37186 aiohttp v3.13.3, Denial of Service (DoS) SmarterMail RCE, CVE-2025-52691 Airoha RACE, Headphone Jacking HPE OneView RCE CVE-2025-37164 FreePBX Auth Bypass, PBX Takeover ScreenConnect Config Flaw, Untrusted Extensions Ruby SAML Auth Bypass, XML Parser Differential Devolutions SQL Injection, Password Manager Flaw Vivotek Unauthenticated RCE, EOL IP Camera Flaw Lynx+ Critical Flaw, Unauthenticated Reset Firebox Default Credentials, CVE-2025-59396 Veeder-Root RCE, Critical ATG Flaw ArcGIS Server SQLi Watchdoc RCE, CVE-2025-58384 Delta DIALink Daikin Security Gateway, authentication bypass Frostbyte10, industrial controller security SunPower, vulnerability Ubiquiti UniFi Connect, EV Station Vulnerabilities Adobe Experience Manager, RCE Vulnerability UniFi Access, Command Injection LDAPNightmare - CVE-2025-1316
  • Vulnerability

CVE-2024-10441 (CVSS 9.8): Synology Patches Critical Code Execution Flaw in Multiple Products

Do Son March 18, 2025 0

Learn about CVE-2024-10441, a critical vulnerability in Synology products that allows remote code execution risks.

End of Windows 10: Microsoft Warns Users, Update or Pay KB5083769 Update Windows 11 24H2 end of support File Explorer White Flash Windows 11 Dark Mode Bug Windows 11 SE, End of Support Windows Update, Automatic Upgrade CVE-2023-38146 Windows 10
  • Technology
  • Windows

End of Windows 10: Microsoft Warns Users, Update or Pay

Do Son March 18, 2025 0

Learn about the upcoming end of support for Windows 10 and what it means for your security and software updates.

Hidden Threat: Zero-Day Windows Shortcut Exploited by Global APT Networks Cisco SD-WAN Vulnerability CVE-2026-20133 FortiGate Compromise Ivanti EPMM Zero-Day CVE-2026-1281 SmarterMail Vulnerability Storm-2603 WatchGuard Zero-Day, IKEv2 Out-of-Bounds Write Cisco Zero-Day, UAT-9686 Chinese APT FortiWeb RCE Exploitation CVE-2025-58034 VMware Zero-Day, Privilege Escalation Sitecore, remote code execution CVE-2025-53690 Windows CLFS, Privilege Escalation CVE-2024-47575 & CVE-2024-11120 CVE-2025-24983 vulnerability
  • Vulnerability

Hidden Threat: Zero-Day Windows Shortcut Exploited by Global APT Networks

Do Son March 18, 2025 0

Understand the risks of Windows shortcut vulnerabilities and how they can be exploited in cyber espionage operations.

Million-Download Node.js Library xml-crypto Hit by Critical Security Flaws (CVE-2025-29774, CVE-2025-29775) CVE-2025-29774, CVE-2025-29775
  • Vulnerability

Million-Download Node.js Library xml-crypto Hit by Critical Security Flaws (CVE-2025-29774, CVE-2025-29775)

Do Son March 18, 2025 0

CVE-2025-29774 & CVE-2025-29775 pose serious security risks. Learn how this vulnerability affects xml-crypto in your Node.js applications.

Cybersecurity Alert: CISA Adds Fortinet and GitHub Action Vulnerabilities to Exploited List GitHub Action Vulnerabilities
  • Vulnerability

Cybersecurity Alert: CISA Adds Fortinet and GitHub Action Vulnerabilities to Exploited List

Do Son March 18, 2025 0

Explore the recent CISA warnings regarding GitHub Action vulnerabilities and the impact on Fortinet FortiOS and FortiProxy.

FIN7’s New Stealth Weapon: AnubisBackdoor Emerges in the Wild DriverFixer0428, Contagious Interview Cache Smuggling, ClickFix Evasion North Korean Cyber Espionage
  • Malware

FIN7’s New Stealth Weapon: AnubisBackdoor Emerges in the Wild

Do Son March 18, 2025 0

Discover AnubisBackdoor, a Python-based malware that allows full control over infected machines with advanced evasion techniques.

CVE-2025-2000 (CVSS 9.8): Qiskit SDK Vulnerability Allows Arbitrary Code Execution CVE-2025-2000
  • Vulnerability

CVE-2025-2000 (CVSS 9.8): Qiskit SDK Vulnerability Allows Arbitrary Code Execution

Do Son March 18, 2025 0

Learn about CVE-2025-2000, a critical vulnerability in Qiskit SDK that can allow arbitrary code execution and compromise systems.

Unusual Malware Samples Discovered, Including C++/CLI IIS Backdoor C++/CLI IIS Backdoor
  • Malware

Unusual Malware Samples Discovered, Including C++/CLI IIS Backdoor

Do Son March 18, 2025 0

Explore the C++/CLI IIS backdoor as detailed by Unit 42, uncovering its unique characteristics and implications for security.

Critical Vulnerabilities Found in Sungrow iSolarCloud App and WiNet Firmware Critical Vulnerabilities Found in Sungrow iSolarCloud App and WiNet Firmware
  • Vulnerability

Critical Vulnerabilities Found in Sungrow iSolarCloud App and WiNet Firmware

Do Son March 18, 2025 0

Learn about the Sungrow iSolarCloud vulnerability and its serious security risks highlighted by CISA in their latest advisory.

INDOHAXSEC: Emerging Indonesian Hacktivist Collective Targets Southeast Asia INDOHAXSEC Hacktivist
  • Cyber Security

INDOHAXSEC: Emerging Indonesian Hacktivist Collective Targets Southeast Asia

Do Son March 18, 2025 0

Explore the rise of INDOHAXSEC, a new hacktivist group in Indonesia making headlines with cyberattacks and DDoS activities.

CVE-2025-2263 (CVSS 9.8): Stack Overflow Flaw Threatens Patient Data in PACS Systems, PoC Published CVE-2025-2263 Orthanc Security DICOM Vulnerabilities
  • Vulnerability

CVE-2025-2263 (CVSS 9.8): Stack Overflow Flaw Threatens Patient Data in PACS Systems, PoC Published

Do Son March 18, 2025 0

Learn about CVE-2025-2263 and its impact on Sante PACS Server. Discover the critical vulnerabilities affecting healthcare systems.

Google’s Android Terminal: More Linux Apps, Not a Linux Desktop Android 16 adoption rate Android 16KB Page, .NET MAUI 9 Android Security, Fast Charging Android Canary, Developer Program Android Updates, EU Regulation Android 16 Google Android Terminal Cloud Compilation Android, Google I/O
  • Android
  • Technology

Google’s Android Terminal: More Linux Apps, Not a Linux Desktop

Do Son March 18, 2025 0

Explore the Google Android Terminal, a new app for executing Linux scripts in a virtual machine on your Android device.

Critical Flaws Expose SICK DL100 Devices to Code Execution and Password Hacks CVE-2024-10025 CVE-2025-27593 & CVE-2025-27595
  • Vulnerability

Critical Flaws Expose SICK DL100 Devices to Code Execution and Password Hacks

Do Son March 18, 2025 0

Learn about CVE-2025-27593 & CVE-2025-27595 and how they impact SICK's DL100-2xxxxxxx devices with critical vulnerabilities. Stay informed.

Fans-CRM: Best Creator Tool for OnlyFans VPN & Content Management 1
  • Technique

Fans-CRM: Best Creator Tool for OnlyFans VPN & Content Management

Do Son March 18, 2025 0

Use Fans-CRM with your OnlyFans VPN to safely manage content worldwide. Automate scheduling, analytics & more—all free with Fans-CRM. Start growing today!

Massive Ad Fraud Campaign Deployed 331 Apps, Resulting in 60 Million Downloads Ad Fraud Campaign
  • Malware

Massive Ad Fraud Campaign Deployed 331 Apps, Resulting in 60 Million Downloads

Do Son March 18, 2025 0

Uncover the Ad Fraud Campaign affecting 331 malicious applications on Google Play, impacting over 60 million downloads.

SquareX Launches “Year of Browser Bugs” (YOBB) to Expose Critical Security Blind Spots Press_Release_Image_20250317_01_SquareX_Year_of_Br_1742208078h25SzkK9RV
  • Press Release

SquareX Launches “Year of Browser Bugs” (YOBB) to Expose Critical Security Blind Spots

cybernewswire March 18, 2025 0
Palo Alto, USA, 18th March 2025, CyberNewsWire
Read More Read more about SquareX Launches “Year of Browser Bugs” (YOBB) to Expose Critical Security Blind Spots
Google’s New YouTube Warning: No Ad Blockers or Lose Your Account? YouTube Shorts, digital well-being YouTube AI doppelgängers Shorts, Gemini 3 Playables games
  • Technology

Google’s New YouTube Warning: No Ad Blockers or Lose Your Account?

Do Son March 18, 2025 0

Explore the impact of YouTube Ad Blockers on your Google account. Discover why using them could lead to account suspension.

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-116606CVSS 9.3
    An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to...
    Admin intel📅 Updated: Nov 10, 2026
  • CVE-2026-125350
    Use after free in XML. Reported by anonymous on 2026-11-06. Google is aware that an exploit for CVE-2026-125350...
    Admin intel📅 Updated: Nov 10, 2026
  • CVE-2026-123751CVSS 9.8
    The WP Duplicate WordPress plugin through 1.1.11 does not properly verify a request authentication value and does not...
    Watchtower Verified📅 Updated: Nov 9, 2026
  • CVE-2026-111793CVSS 4.3
    Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted....
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-114713CVSS 8.6
    The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing...
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-116779CVSS 9.8
    Summary `sofia_presence_handle_sip_i_message()` splits the To user of an inbound SIP MESSAGE on `+` and treats the left half...
    CISA KEV📅 Added to KEV: Nov 9, 2026
  • CVE-2026-102895CVSS 9.8
    GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0,...
    CISA KEV📅 Added to KEV: Nov 9, 2026
  • CVE-2026-123158CVSS 8.1
    sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for...
    CISA KEV📅 Added to KEV: Nov 9, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-13312CVSS 9.9
    A vulnerability that could allow an attacker to compromise a system.
    📅 Updated: Nov 10, 2026
  • CVE-2026-72868CVSS 9.9
    Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, apps/dokploy/server/api/routers/destination.ts interpolates the accessKey, secretAccessKey,...
    📅 Updated: Nov 10, 2026
  • CVE-2026-6715CVSS 9.8
    IBM Concert 1.0 through 3.0.1.1 allows an attacker can supply crafted input that is incorporated into an operating...
    📅 Updated: Nov 10, 2026
  • CVE-2026-17403CVSS 9.0
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to gain full...
    📅 Updated: Nov 10, 2026
  • CVE-2026-17409CVSS 9.4
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute unauthorized...
    📅 Updated: Nov 10, 2026
  • CVE-2026-17402CVSS 9.9
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute...
    📅 Updated: Nov 10, 2026
  • CVE-2026-17392CVSS 9.9
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to gain...
    📅 Updated: Nov 10, 2026
  • CVE-2026-17158CVSS 9.9
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to gain...
    📅 Updated: Nov 10, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.