Skip to content
November 10, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
Light/Dark Button
Password Management at Risk: Vaultwarden Vulnerabilities Expose Millions CVE-2025-24365 & Vaultwarden Vulnerabilities CVE-2025-24364
  • Vulnerability

Password Management at Risk: Vaultwarden Vulnerabilities Expose Millions

Do Son January 29, 2025 0

Critical vulnerabilities discovered in Vaultwarden expose organizations to unauthorized access and privilege escalation. Learn more about CVE-2025-24364 and other security flaws.

X and Visa Partner to Launch “X Money” Payment Service "X Money" service
  • Technology

X and Visa Partner to Launch “X Money” Payment Service

Do Son January 29, 2025 0

Find out how X is revolutionizing the financial services industry with its 'X Money' service. Discover the seamless integration of Visa Direct and the convenience it brings to X users.

Google’s Agentic AI Security Team Develops Framework to Combat Prompt Injection Attacks Gemini AI Prompt injection
  • Cyber Security
  • Vulnerability

Google’s Agentic AI Security Team Develops Framework to Combat Prompt Injection Attacks

Do Son January 29, 2025 0

Discover how Google's Agentic AI Security Team is combating prompt injection attacks on AI systems like Gemini with a new framework.

VMware Avi Load Balancer Flaw (CVE-2025-22217) Exposes Networks to Blind SQLi Attacks CVE-2025-22217 - CVE-2025-22218 Broadcom, VMware Licensing
  • Vulnerability

VMware Avi Load Balancer Flaw (CVE-2025-22217) Exposes Networks to Blind SQLi Attacks

Do Son January 29, 2025 0

This vulnerability, identified as CVE-2025-22217 and given a CVSSv3 base score of 8.6, could allow attackers to gain unauthorized access to sensitive data

CVE-2025-0065: TeamViewer Patches Privilege Escalation Vulnerability in Windows Clients CVE-2025-0065
  • Vulnerability

CVE-2025-0065: TeamViewer Patches Privilege Escalation Vulnerability in Windows Clients

Do Son January 29, 2025 0

The vulnerability, tracked as CVE-2025-0065 and assigned a CVSS score of 7.8 (High), affects TeamViewer Clients for Windows prior to version 15.62.

PoC Releases for Fortinet Zero-Day Vulnerability CVE-2024-5559, 45,000 Remain Vulnerable CVE-2024-55591 PoC exploit
  • Vulnerability

PoC Releases for Fortinet Zero-Day Vulnerability CVE-2024-5559, 45,000 Remain Vulnerable

Do Son January 28, 2025 0

Learn about a 0day flaw in Fortinet's FortiOS and FortiProxy products. Explore the technical details and PoC exploit code for CVE-2024-55591

Malicious PDFs Used in Large-Scale Phishing Operation Malicious PDF
  • Cyber Security

Malicious PDFs Used in Large-Scale Phishing Operation

Do Son January 28, 2025 0

Learn how cybercriminals are using malicious PDF files in a large-scale phishing campaign. Protect yourself and your sensitive information.

CVE-2025-22604 (CVSS 9.1): Remote Code Execution Flaw in Cacti, PoC Released CVE-2025-22604 PoC exploit
  • Vulnerability

CVE-2025-22604 (CVSS 9.1): Remote Code Execution Flaw in Cacti, PoC Released

Do Son January 28, 2025 0

Stay informed about the critical vulnerability CVE-2025-22604 in Cacti network monitoring software. Learn how this flaw could allow code execution and compromise sensitive data.

Premium Panel Phishing Toolkit Exposed: Two Years of Global Attacks Premium panel phishing toolkit
  • Cyber Security

Premium Panel Phishing Toolkit Exposed: Two Years of Global Attacks

Do Son January 28, 2025 0

Uncover the secrets behind Premium Panel, a powerful phishing toolkit used in global credential theft campaigns for over two years.

CVSS 10 Alert: Coolify Hit by Three Critical Security Flaws – CVE-2025-22612, CVE-2025-22611, and CVE-2025-22609 Coolify Vulnerabilities CVE-2025-64419 CVE-2025-22612, CVE-2025-22611, and CVE-2025-22609
  • Vulnerability

CVSS 10 Alert: Coolify Hit by Three Critical Security Flaws – CVE-2025-22612, CVE-2025-22611, and CVE-2025-22609

Do Son January 28, 2025 0

Discover the severe threat of CVE-2025-22612, CVE-2025-22611, and CVE-2025-22609 in Coolify. Secure your servers, applications, and databases.

Cyberattackers Unleash LockBit Ransomware Using Cobalt Strike and Proxy Tools LockBit Ransomware Cobalt Strike
  • Malware

Cyberattackers Unleash LockBit Ransomware Using Cobalt Strike and Proxy Tools

Do Son January 28, 2025 0

Discover the sophisticated LockBit ransomware operation leveraging Cobalt Strike beacons and proxy tools. Learn how it infiltrated systems and the impact it had.

Authentication Bypass in Deepin D-Bus Proxy Service (CVE-2025-23222): A Critical Design Flaw Exposed CVE-2025-23222
  • Vulnerability

Authentication Bypass in Deepin D-Bus Proxy Service (CVE-2025-23222): A Critical Design Flaw Exposed

Do Son January 28, 2025 0

Find out how the authentication design flaw in Deepin desktop environment's dde-api-proxy service (CVE-2025-23222) enables local users to bypass authentication and execute unauthorized operations.

Over 18,000 Devices Compromised in XWorm RAT Builder Campaign XWorm Remote Access Trojan
  • Malware

Over 18,000 Devices Compromised in XWorm RAT Builder Campaign

Do Son January 28, 2025 0

Beware of the XWorm Remote Access Trojan (RAT) builder attack. Discover how threat actors are targeting inexperienced cybersecurity enthusiasts with this malicious software.

Updatecli Tool Vulnerable to Credential Exposure – CVE-2025-24355 CVE-2025-24355
  • Vulnerability

Updatecli Tool Vulnerable to Credential Exposure – CVE-2025-24355

Do Son January 28, 2025 0

Updatecli tool vulnerability (CVE-2025-24355): Critical flaw exposes Maven credentials, potentially compromising sensitive data.

Crazy Evil Cryptoscam Group Steals Millions from Crypto Enthusiasts Crazy Evil Cryptoscam Gang
  • Cyber Security

Crazy Evil Cryptoscam Group Steals Millions from Crypto Enthusiasts

Do Son January 28, 2025 0

Uncover the operations of the prolific cybercriminal group Crazy Evil. Dive into their sophisticated social engineering tactics and cross-platform malware toolkit.

Tax Season Cybersecurity Alert: Report Reveals Surge in Tax-Related Cyberattacks Tax Season Cybersecurity
  • Cyber Security

Tax Season Cybersecurity Alert: Report Reveals Surge in Tax-Related Cyberattacks

Do Son January 28, 2025 0

Discover the latest cybersecurity threats during tax season. Find out how cybercriminals are targeting tax agencies and stealing sensitive information.

Nvidia Releases Security Update for GPU Display Driver to Address Multi Vulnerabilities Windows 11 KB5074109 gaming bug NVIDIA GPU Display Driver
  • Vulnerability

Nvidia Releases Security Update for GPU Display Driver to Address Multi Vulnerabilities

Do Son January 28, 2025 0

Stay secure with the latest Nvidia GPU Display Driver update. Learn about the security vulnerabilities and how to protect your system.

EU Sanctions Russian GRU Officers for 2020 Cyberattacks on Estonia Estonia Cyberattacks
  • Cyber Security

EU Sanctions Russian GRU Officers for 2020 Cyberattacks on Estonia

Do Son January 28, 2025 0

Sanctions imposed on Russian military officers for orchestrating cyberattacks on Estonia in 2020. Learn about the stolen confidential documents and compromised sensitive data.

AI-Driven API Exploits Skyrocket: 1,025% Jump in 2024, Almost All Tied to APIs API
  • Technique

AI-Driven API Exploits Skyrocket: 1,025% Jump in 2024, Almost All Tied to APIs

Do Son January 28, 2025 0
Wallarm’s latest findings show AI has become the top driver of surging API vulnerabilities. Researchers identified 439...
Read More Read more about AI-Driven API Exploits Skyrocket: 1,025% Jump in 2024, Almost All Tied to APIs
DeepSeek’s $6 Million AI Model Outperforms GPT-4 DeepSeek V3 App Store
  • Technology

DeepSeek’s $6 Million AI Model Outperforms GPT-4

Do Son January 27, 2025 0

Uncover the secrets of DeepSeek V3, the AI app disrupting the market. Find out how it outperforms competitors with low operating costs.

CVE-2024-56626 & CVE-2024-56627: Critical Linux Kernel SMB Server Bugs Uncovered, PoC Published CVE-2024-56626 & CVE-2024-56627
  • Linux
  • Vulnerability

CVE-2024-56626 & CVE-2024-56627: Critical Linux Kernel SMB Server Bugs Uncovered, PoC Published

Do Son January 27, 2025 0

Discover the critical vulnerabilities in KSMBD, CVE-2024-56626 and CVE-2024-56627, that could allow attackers to gain control of Linux systems.

SimpleHelp RMM Vulnerabilities Exploited in Latest Cyberattack Campaign SimpleHelp Cyberattack
  • Vulnerability

SimpleHelp RMM Vulnerabilities Exploited in Latest Cyberattack Campaign

Do Son January 27, 2025 0

Stay informed about the latest cyberattack targeting SimpleHelp RMM software. Learn about the vulnerabilities and potential damage caused by this campaign.

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-116606CVSS 9.3
    An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to...
    Admin intel📅 Updated: Nov 10, 2026
  • CVE-2026-125350
    Use after free in XML. Reported by anonymous on 2026-11-06. Google is aware that an exploit for CVE-2026-125350...
    Admin intel📅 Updated: Nov 10, 2026
  • CVE-2026-123751CVSS 9.8
    The WP Duplicate WordPress plugin through 1.1.11 does not properly verify a request authentication value and does not...
    Watchtower Verified📅 Updated: Nov 9, 2026
  • CVE-2026-111793CVSS 4.3
    Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted....
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-114713CVSS 8.6
    The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing...
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-116779CVSS 9.8
    Summary `sofia_presence_handle_sip_i_message()` splits the To user of an inbound SIP MESSAGE on `+` and treats the left half...
    CISA KEV📅 Added to KEV: Nov 9, 2026
  • CVE-2026-102895CVSS 9.8
    GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0,...
    CISA KEV📅 Added to KEV: Nov 9, 2026
  • CVE-2026-123158CVSS 8.1
    sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for...
    CISA KEV📅 Added to KEV: Nov 9, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-61949CVSS 9.3
    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Bookly Bookly bookly-responsive-appointment-booking-tool allows...
    📅 Updated: Nov 10, 2026
  • CVE-2026-13312CVSS 9.9
    A vulnerability that could allow an attacker to compromise a system.
    📅 Updated: Nov 10, 2026
  • CVE-2026-72868CVSS 9.9
    Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, apps/dokploy/server/api/routers/destination.ts interpolates the accessKey, secretAccessKey,...
    📅 Updated: Nov 10, 2026
  • CVE-2026-6715CVSS 9.8
    IBM Concert 1.0 through 3.0.1.1 allows an attacker can supply crafted input that is incorporated into an operating...
    📅 Updated: Nov 10, 2026
  • CVE-2026-17403CVSS 9.0
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to gain full...
    📅 Updated: Nov 10, 2026
  • CVE-2026-17409CVSS 9.4
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute unauthorized...
    📅 Updated: Nov 10, 2026
  • CVE-2026-17402CVSS 9.9
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute...
    📅 Updated: Nov 10, 2026
  • CVE-2026-17392CVSS 9.9
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to gain...
    📅 Updated: Nov 10, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.