Skip to content
October 8, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
PoC Exploit Released for Zero-Click Vulnerability CVE-2024-49113 in Windows CVE-2024-49112 PoC exploit
  • Vulnerability

PoC Exploit Released for Zero-Click Vulnerability CVE-2024-49113 in Windows

Do Son January 1, 2025 0
Read More Read more about PoC Exploit Released for Zero-Click Vulnerability CVE-2024-49113 in Windows
CVE-2024-12108 (CVSS 9.6) and Beyond: Progress Issues Critical Patch for WhatsUp Gold Network Monitoring Software CVE-2024-1800, CVE-2024-12108 & CVE-2024-12106
  • Vulnerability

CVE-2024-12108 (CVSS 9.6) and Beyond: Progress Issues Critical Patch for WhatsUp Gold Network Monitoring Software

Do Son January 1, 2025 0
Read More Read more about CVE-2024-12108 (CVSS 9.6) and Beyond: Progress Issues Critical Patch for WhatsUp Gold Network Monitoring Software
From Fake Installers to Stolen Credentials: Decoding the LegionLoader Threat KongTuke Microsoft Teams Phishing ModeloRAT Initial Access Broker CVE-2024-38193 - Lazarus Group Threat Actors ScreenConnect
  • Malware

From Fake Installers to Stolen Credentials: Decoding the LegionLoader Threat

Do Son January 1, 2025 0
Read More Read more about From Fake Installers to Stolen Credentials: Decoding the LegionLoader Threat
New Research Reveals a Novel “Bad Likert Judge” Technique to Jailbreak LLMs Bad Likert Judge - Artificial Intelligence Diffusion
  • Vulnerability

New Research Reveals a Novel “Bad Likert Judge” Technique to Jailbreak LLMs

Do Son January 1, 2025 0
Read More Read more about New Research Reveals a Novel “Bad Likert Judge” Technique to Jailbreak LLMs
D-Link Issues Warning on End-of-Life Routers Vulnerable to Botnet Exploits D-Link Vulnerability - End-of-Life Routers
  • Malware
  • Vulnerability

D-Link Issues Warning on End-of-Life Routers Vulnerable to Botnet Exploits

Do Son January 1, 2025 0
Read More Read more about D-Link Issues Warning on End-of-Life Routers Vulnerable to Botnet Exploits
How Fintech Companies Can Boost Cybersecurity In 2025 Salesforce vulnerability CVE-2025-9844 Salt Typhoon cyberattack
  • Technique

How Fintech Companies Can Boost Cybersecurity In 2025

Do Son January 1, 2025 0
Read More Read more about How Fintech Companies Can Boost Cybersecurity In 2025
CVE-2024-21182: PoC Exploit Code Published for Severe WebLogic Flaw IRGC Oracle Cloud Dubai strike Oracle global layoffs 2026 Oracle Fusion Middleware Vulnerability CVE-2026-21992 Oracle Edge Cloud Vulnerability CVE-2026-21994 Oracle Critical RCE, EBS Marketing Flaws CVE-2024-21182 PoC Exploit Oracle EBS Auth Bypass, CVE-2025-61884
  • Vulnerability

CVE-2024-21182: PoC Exploit Code Published for Severe WebLogic Flaw

Do Son December 31, 2024 1
Read More Read more about CVE-2024-21182: PoC Exploit Code Published for Severe WebLogic Flaw
Is Your Network at Risk? New Report Highlights Network File System Vulnerabilities Network File System vulnerability
  • Vulnerability

Is Your Network at Risk? New Report Highlights Network File System Vulnerabilities

Do Son December 31, 2024 0
Read More Read more about Is Your Network at Risk? New Report Highlights Network File System Vulnerabilities
LineageOS 22.1 Blasts Off: A New Era of Customization with Android 15! LineageOS 22.1 LineageOS 23.0, Android 16
  • Android

LineageOS 22.1 Blasts Off: A New Era of Customization with Android 15!

Do Son December 31, 2024 0
Read More Read more about LineageOS 22.1 Blasts Off: A New Era of Customization with Android 15!
Top Plugins for WordPress Learning Management Systems Employees Risk
  • Technique

Top Plugins for WordPress Learning Management Systems

Do Son December 31, 2024 0
Read More Read more about Top Plugins for WordPress Learning Management Systems
Cisco Confirms No Breach After Threat Actor Releases More Data Cisco Secure FMC CVE-2026-20079 Cisco RCE, Firewall Vulnerability Cisco Nexus, vulnerability CVE-2024-20412 - Cisco data breach
  • Data Leak

Cisco Confirms No Breach After Threat Actor Releases More Data

Do Son December 30, 2024 0
Read More Read more about Cisco Confirms No Breach After Threat Actor Releases More Data
CISA Warns of Actively Exploited Palo Alto Firewall Flaw (CVE-2024-3393) CVE-2024-3393 vulnerability
  • Vulnerability

CISA Warns of Actively Exploited Palo Alto Firewall Flaw (CVE-2024-3393)

Do Son December 30, 2024 0
Read More Read more about CISA Warns of Actively Exploited Palo Alto Firewall Flaw (CVE-2024-3393)
Treasury Department Hit by Major Cybersecurity Incident, China Suspected Weaver E-cology RCE CVE-2026-22679 CVE-2026-20127 Cisco SD-WAN Exploitation AI-Driven Cyberattack ARXON Malware React Server Components Vulnerability CVE-2025-55182 FortiWeb Auth Bypass, Unauthenticated Admin Takeover RayInitiator Bootkit, LINE VIPER CVE-2025-59689 Department of the Treasury cybersecurity - CVE-2025-0108 PoC CVE-2025-31103 Dior Data Breach SK Telecom data breach, long-term intrusion
  • Cyber Security

Treasury Department Hit by Major Cybersecurity Incident, China Suspected

Do Son December 30, 2024 0
Read More Read more about Treasury Department Hit by Major Cybersecurity Incident, China Suspected
CVE-2024-11944: TrueNAS CORE Vulnerability Allows Unauthenticated Attacks CVE-2024-11944
  • Vulnerability

CVE-2024-11944: TrueNAS CORE Vulnerability Allows Unauthenticated Attacks

Do Son December 30, 2024 0
Read More Read more about CVE-2024-11944: TrueNAS CORE Vulnerability Allows Unauthenticated Attacks
66,000 DrayTek Gateways Vulnerable to Remote Command Injection (CVE-2024-12987), PoC Published BingX cyberattack FortiGate SSO Attacks Firewall Config Theft
  • Vulnerability

66,000 DrayTek Gateways Vulnerable to Remote Command Injection (CVE-2024-12987), PoC Published

Do Son December 30, 2024 0
Read More Read more about 66,000 DrayTek Gateways Vulnerable to Remote Command Injection (CVE-2024-12987), PoC Published
Stealthy UEFI Bootkit Targets Windows Kernel, Raising Security Concerns Windows UEFI bootkit
  • Malware

Stealthy UEFI Bootkit Targets Windows Kernel, Raising Security Concerns

Do Son December 30, 2024 0
Read More Read more about Stealthy UEFI Bootkit Targets Windows Kernel, Raising Security Concerns
IBM’s HashiCorp Acquisition Under Scrutiny: CMA Investigates Competition Concerns CVE-2024-41779 - CVE-2025-0159 IBM HashiCorp Acquisition
  • Technology

IBM’s HashiCorp Acquisition Under Scrutiny: CMA Investigates Competition Concerns

Do Son December 30, 2024 0
Read More Read more about IBM’s HashiCorp Acquisition Under Scrutiny: CMA Investigates Competition Concerns
IPMsg Installer Weaponized: Lazarus Group Targets Crypto & Finance Lazarus IPMsg installer
  • Cyber Security

IPMsg Installer Weaponized: Lazarus Group Targets Crypto & Finance

Do Son December 30, 2024 0
Read More Read more about IPMsg Installer Weaponized: Lazarus Group Targets Crypto & Finance
Malware Targeting the Ukrainian Military: SSH Over TOR Backdoor Unveiled SSH Over TOR Backdoor
  • Malware

Malware Targeting the Ukrainian Military: SSH Over TOR Backdoor Unveiled

Do Son December 30, 2024 0
Read More Read more about Malware Targeting the Ukrainian Military: SSH Over TOR Backdoor Unveiled
PLAYFULGHOST Malware: A Sophisticated Gh0st RAT Variant with Advanced Distribution Tactics QQL
  • Malware

PLAYFULGHOST Malware: A Sophisticated Gh0st RAT Variant with Advanced Distribution Tactics

Do Son December 30, 2024 0
Read More Read more about PLAYFULGHOST Malware: A Sophisticated Gh0st RAT Variant with Advanced Distribution Tactics
LLMs Crack the Code: 95% Success Rate in Hacking Challenge LLMs cybersecurity - InterCode-CTF
  • Cyber Security

LLMs Crack the Code: 95% Success Rate in Hacking Challenge

Do Son December 30, 2024 0
Read More Read more about LLMs Crack the Code: 95% Success Rate in Hacking Challenge
AI Dev Gallery: Microsoft Unleashes On-Device AI for Windows 11 Microsoft AI Dev Gallery
  • Technology
  • Windows

AI Dev Gallery: Microsoft Unleashes On-Device AI for Windows 11

Do Son December 30, 2024 0
Read More Read more about AI Dev Gallery: Microsoft Unleashes On-Device AI for Windows 11
❮ Prev Page
Next Page ❯

Search

Translation

CVE ALERTS
πŸ“ˆ

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

πŸ›‘οΈ

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

πŸ™

GitHub Issues
Auto-create alert tickets without duplication.

πŸ“¬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

πŸ”€

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days β†’

🚨 Active Exploits in the Wild

  • CVE-2026-94504CVSS 7.2
    Ninja Forms 3.15.3 stores an anonymous non-RTE textarea value and renders it without safe HTML encoding in the...
    Admin intel📅 Updated: Oct 7, 2026
  • CVE-2026-93836CVSS 7.2
    The WPC Product Bundles for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \'qty\'...
    Admin intel📅 Updated: Oct 7, 2026
  • CVE-2026-21589CVSS 9.3
    This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software...
    Admin intel📅 Updated: Oct 7, 2026
  • CVE-2026-61500CVSS 9.3
    Rejetto HFS 3.0.0 through 3.2.0 derives its session-cookie signing key from the non-cryptographic Math.random() generator and discloses outputs...
    Admin intel📅 Updated: Oct 7, 2026
  • CVE-2026-88779CVSS 8.7
    Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS,...
    Admin intelCISA KEV📅 Added to KEV: Oct 4, 2026📅 Updated: Oct 4, 2026
  • CVE-2026-102490CVSS 8.5
    All versions of Zammad including the latest alpha enable the local zammad user to escalate privileges to root.
    Admin intelCISA KEV📅 Added to KEV: Oct 2, 2026📅 Updated: Oct 2, 2026
  • CVE-2026-102489CVSS 8.7
    Zammad versions 6.3.0 to 6.5.4 are vulnerable a session hijack vulnerability that leads to remote code execution as...
    Admin intelCISA KEV📅 Added to KEV: Oct 2, 2026📅 Updated: Oct 2, 2026
  • CVE-2026-100382CVSS 10.0
    Improper Neutralization of Special Elements used in an OS Command (\'OS Command Injection\') vulnerability in Wikimedia Foundation Mediawiki...
    Admin intel📅 Updated: Oct 1, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-106016CVSS 9.8
    Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 157.0.1.
    📅 Updated: Oct 7, 2026
  • CVE-2026-103877CVSS 9.8
    Deserialization of Untrusted Data vulnerability in Apache Directory LDAP API. A rogue/compromised LDAP server (or pre-TLS MITM) can...
    📅 Updated: Oct 7, 2026
  • CVE-2026-105636CVSS 9.9
    Plane is an open-source project management tool. Prior to 1.4.0, the webhook delivery task in apps/api/plane/bgtasks/webhook_task.py calls requests.post()...
    📅 Updated: Oct 7, 2026
  • CVE-2026-105641CVSS 9.8
    Plane is an open-source project management tool. Prior to 1.4.0, the deployments/aio/community/ and deployments/cli/community/ manifests provide fixed, publicly...
    📅 Updated: Oct 7, 2026
  • CVE-2020-9547CVSS 9.8
    FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.ibatis.sqlmap.engine.transaction.jta.JtaTransactionConfig (aka ibatis-sqlmap).
    📅 Updated: Oct 7, 2026
  • CVE-2026-95106CVSS 9.1
    Gitea accepted pushed Git trees containing two entries with the same name, which Git's own consistency checks reject....
    📅 Updated: Oct 7, 2026
  • CVE-2026-94205CVSS 9.8
    Gitea Actions decided whether a fork pull request run needed approval based on the user who triggered the...
    📅 Updated: Oct 7, 2026
  • CVE-2026-86345CVSS 9.0
    A flaw was found in 389-ds-base. The server does not discard plaintext bytes already buffered from a client...
    📅 Updated: Oct 7, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q2 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
Β© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.