Skip to content
November 10, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
Light/Dark Button
CVE-2025-23006 (CVSS 9.8): SonicWall Warns of Active Exploits, Issues Urgent Update for SMA1000 Users SonicWall Security Advisory SonicOS Patch 2026 CVE-2025-23006 SonicWall, SMA 100 Vulnerabilities
  • Vulnerability

CVE-2025-23006 (CVSS 9.8): SonicWall Warns of Active Exploits, Issues Urgent Update for SMA1000 Users

Do Son January 23, 2025 0

SonicWall warns of critical vulnerability CVE-2025-23006 in SMA1000 AMC and CMC. Attackers can exploit this pre-authentication remote command execution flaw.

CVE-2025-0314: GitLab Releases Patch for XSS Exploit GitLab AI Gateway Vulnerability CVE-2026-1868 CVE-2025-0314 GitLab Security Update CVE-2025-9222
  • Vulnerability

CVE-2025-0314: GitLab Releases Patch for XSS Exploit

Do Son January 23, 2025 0

GitLab security update: Addressing multiple vulnerabilities, including the high severity cross-site scripting flaw (CVE-2025-0314). Stay protected!

CISA and FBI Warn of Exploited Ivanti CSA Vulnerabilities in Joint Security Advisory OCRFix Botnet EtherHiding CrowdStrike supply chain attack Ivanti CSA Vulnerabilities
  • Vulnerability

CISA and FBI Warn of Exploited Ivanti CSA Vulnerabilities in Joint Security Advisory

Do Son January 22, 2025 0

Stay protected from Ivanti CSA vulnerabilities. Learn about the risks and exploits associated with CVE-2024-8963, CVE-2024-9379, CVE-2024-8190, and CVE-2024-9380.

CVE-2025-20156 (CVSS 9.9): Cisco Meeting Management Flaw Allows for Privilege Escalation CVE-2025-20156
  • Vulnerability

CVE-2025-20156 (CVSS 9.9): Cisco Meeting Management Flaw Allows for Privilege Escalation

Do Son January 22, 2025 0

Cisco has issued a security advisory addressing a critical privilege escalation vulnerability (CVE-2025-20156) in its Meeting Management software

Purrglar: Emerging Stealer Targets Chrome and Exodus Wallet Data on macOS shell-quote command injection AI-Driven Vulnerabilities Q1 2026 Cyber Threats vm2 Sandbox Escape Node.js RCE upKeeper Privilege Escalation CVE-2026-2449 Pharos Controls Vulnerability Root Access Exploit Cybersecurity Vulnerability Roundup CVSS 10.0 Flaws Shadow Archives CVE-2026-0866 MS-Agent Prompt Injection CVE-2026-2256 basic-ftp Path Traversal CVE-2026-27699 telnetd Root Vulnerability CVE-1999-0073 Regression USR-W610 Vulnerabilities End-of-Life IoT Security IceWarp Security Update IceWarp Vulnerabilities Airleader Master Vulnerability CVE-2026-1358 ZLAN5143D Vulnerability CISA ICS Advisory Acronis Cyber Protect Vulnerability CVE-2025-30411 WAGO 852 Vulnerability OT Network Security SandboxJS Vulnerability Sandbox Escape (CVSS 10.0) Kubernetes Local Path Provisioner CVE-2025-62878 CISA Unresponsive Vendors Avation & RISS Vulnerabilities KiloView Vulnerability CVE-2026-1453 OpenClaw RCE vulnerability Johnson Controls Vulnerability CVE-2025-26385 SandboxJS Vulnerability CVE-2026-23830 ibaPDA Vulnerability CVE-2025-14988 Protobuf Vulnerability CVE-2026-0994 AVEVA Process Optimization Vulnerability CVE-2025-61937 ConnectWise PSA Vulnerability CVE-2026-0695 Aruba VIA Vulnerability CVE-2025-37186 aiohttp v3.13.3, Denial of Service (DoS) SmarterMail RCE, CVE-2025-52691 Airoha RACE, Headphone Jacking HPE OneView RCE CVE-2025-37164 FreePBX Auth Bypass, PBX Takeover ScreenConnect Config Flaw, Untrusted Extensions Ruby SAML Auth Bypass, XML Parser Differential Devolutions SQL Injection, Password Manager Flaw Vivotek Unauthenticated RCE, EOL IP Camera Flaw Lynx+ Critical Flaw, Unauthenticated Reset Firebox Default Credentials, CVE-2025-59396 Veeder-Root RCE, Critical ATG Flaw ArcGIS Server SQLi Watchdoc RCE, CVE-2025-58384 Delta DIALink Daikin Security Gateway, authentication bypass Frostbyte10, industrial controller security SunPower, vulnerability Ubiquiti UniFi Connect, EV Station Vulnerabilities Adobe Experience Manager, RCE Vulnerability UniFi Access, Command Injection LDAPNightmare - CVE-2025-1316
  • Malware

Purrglar: Emerging Stealer Targets Chrome and Exodus Wallet Data on macOS

Do Son January 22, 2025 0

Discover Purrglar, a potential new macOS stealer with alarming capabilities. Learn how it exfiltrates sensitive Chrome and Exodus wallet data.

Signal and Discord Vulnerabilities Exposed: 0-Click Deanonymization Attack Revealed deanonymization attack - cache geolocation attack
  • Data Leak
  • Vulnerability

Signal and Discord Vulnerabilities Exposed: 0-Click Deanonymization Attack Revealed

Do Son January 22, 2025 0

Discover the latest deanonymization attack exposed by security researcher Daniel. Learn how this 0-click attack leverages Cloudflare’s caching mechanisms to pinpoint user locations.

ApateWeb Campaign Hijacks Blogspot, Spreads Phishing and Malware ApateWeb operation
  • Cyber Security

ApateWeb Campaign Hijacks Blogspot, Spreads Phishing and Malware

Do Son January 22, 2025 0

Uncover the malicious ApateWeb operation using Blogspot redirectors to distribute phishing pages and malware.

Mercedes-Benz MBUX Vulnerabilities: User Data and Safety at Risk mercedes-benz-2692776_1280
  • Vulnerability

Mercedes-Benz MBUX Vulnerabilities: User Data and Safety at Risk

Do Son January 22, 2025 0

Uncover critical vulnerabilities in the Mercedes-Benz User Experience (MBUX) infotainment system. Learn about the security risks in connected vehicles.

New Bruteforce Campaign Exploits fasthttp Library to Target Azure Environments Azure Bruteforce Campaign
  • Cyber Security

New Bruteforce Campaign Exploits fasthttp Library to Target Azure Environments

Do Son January 22, 2025 0

Uncover the Bruteforce Campaign targeting Azure Active Directory. Learn how attackers are leveraging the fasthttp library for unauthorized access.

Proof-of-Concept Found for ClamAV DoS Flaw: CVE-2025-20128 New_ClamAV_Logo.svg
  • Vulnerability

Proof-of-Concept Found for ClamAV DoS Flaw: CVE-2025-20128

Do Son January 22, 2025 0

Stay informed about the CVE-2025-20128 vulnerability in ClamAV. Discover the risks and steps you can take to mitigate them.

GamaCopy: A New Cyber Espionage Group Imitating Gamaredon to Target Russia Mercenary Akula European Financial Targeting AI-Generated Malware React2Shell Exploit UAT-8837 Critical Infrastructure Attack APT36, BOSS Linux BRICKSTORM Malware, China Espionage Curly COMrades, MucorAgent Chinese APT - HTTP Client Tools Shuckworm Cyber Espionage
  • Cyber Security

GamaCopy: A New Cyber Espionage Group Imitating Gamaredon to Target Russia

Do Son January 22, 2025 0

Discover the emergence of GamaCopy, a cyber espionage group mimicking Gamaredon APT and targeting Russian defense and critical infrastructure sectors.

Security Update for Chrome: Protect Against CVE-2025-0611 and CVE-2025-0612 CVE-2025-0611 and CVE-2025-0612
  • Vulnerability

Security Update for Chrome: Protect Against CVE-2025-0611 and CVE-2025-0612

Do Son January 22, 2025 0

Stay protected with the latest Chrome security update. Learn about the vulnerabilities fixed, including CVE-2025-0611 and CVE-2025-0612.

Operation (Giỗ Tổ Hùng Vương) Hurricane: New OceanLotus Group Revealed in Espionage Campaigns CVE-2024-36072 Water Gamayun, MSC EvilTwin
  • Cyber Security

Operation (Giỗ Tổ Hùng Vương) Hurricane: New OceanLotus Group Revealed in Espionage Campaigns

Do Son January 22, 2025 0

Learn about the sophisticated cyber-espionage tactics of the New OceanLotus group. Discover how they target critical sectors with advanced techniques and leverage zero-day vulnerabilities.

Cybercriminals Exploit AnyDesk to Impersonate CERT-UA in Sophisticated Phishing Campaign BlueNoroff macOS Attack GhostCall Campaign Carding Underground Bulletproof Hosting DPRK Contagious Interview, npm Flood Stonefly group -HiatusRAT Actors
  • Cyber Security

Cybercriminals Exploit AnyDesk to Impersonate CERT-UA in Sophisticated Phishing Campaign

Do Son January 22, 2025 0

Beware of cybercriminals using AnyDesk for malicious activities. Learn how these attackers exploit trust in CERT-UA for unauthorized access and data breaches.

Breaking News: Introducing the Stargate Project – OpenAI’s Transformative AI Infrastructure Yoshua Bengio AI sycophancy, reverse deception AI feedback AI chatbots, FTC investigation AI-generated content Trump AI Policy, AI Deregulation Military AI, DoD Funding Stargate Project AI Art Restoration
  • Technology

Breaking News: Introducing the Stargate Project – OpenAI’s Transformative AI Infrastructure

Do Son January 22, 2025 0

Explore the innovative Stargate Project, a collaboration of OpenAI, SoftBank, and Oracle to build a powerful AI infrastructure.

Mirai Botnet Unleashes Record-Breaking DDoS Attack, Cloudflare Thwarts Threat MadeYouReset, HTTP/2 vulnerability FSF, AI Scraping Attacks OracleIV botnet
  • Cyber Security

Mirai Botnet Unleashes Record-Breaking DDoS Attack, Cloudflare Thwarts Threat

Do Son January 22, 2025 0

Learn about a record-breaking DDoS attack that targeted an internet service provider in East Asia. Discover how Cloudflare's advanced defense system neutralized the threat.

ASUS and AdGuard Team Up to Deliver Ad-Free Wi-Fi 7 Experience AdGuard DNS
  • Technology

ASUS and AdGuard Team Up to Deliver Ad-Free Wi-Fi 7 Experience

Do Son January 22, 2025 0

Discover the powerful combination of ASUS routers and AdGuard DNS for effortless ad blocking and enhanced online security.

CVE-2024-12857: Critical Flaw in AdForest Theme Allows Complete Account Takeover, Thousands of Sites at Risk CVE-2024-12857
  • Vulnerability

CVE-2024-12857: Critical Flaw in AdForest Theme Allows Complete Account Takeover, Thousands of Sites at Risk

Do Son January 21, 2025 0

Attention AdForest WordPress theme users: severe security flaw (CVE-2024-12857) allows attackers to bypass authentication and take over your site.

CVE-2025-23083: Node.js Vulnerability Exposes Sensitive Data and Resources CVE-2025-23083 - Node.js EOL
  • Vulnerability

CVE-2025-23083: Node.js Vulnerability Exposes Sensitive Data and Resources

Do Son January 21, 2025 0

Node.js security update: Patching high-severity vulnerability (CVE-2025-23083) that could allow unauthorized access to sensitive data.

400,000+ Systems Infected: DigitalPulse Proxyware Returns with New Tricks DigitalPulse Proxyware malware
  • Malware

400,000+ Systems Infected: DigitalPulse Proxyware Returns with New Tricks

Do Son January 21, 2025 0

Learn about the resurgence of DigitalPulse proxyware and its impact on Windows systems. Find out how attackers steal bandwidth for profit.

Critical Apache Ambari Security Vulnerabilities Discovered: What You Need to Know CVE-2025-23195, CVE-2025-23196, and CVE-2024-51941
  • Vulnerability

Critical Apache Ambari Security Vulnerabilities Discovered: What You Need to Know

Do Son January 21, 2025 0

Discover the critical security flaws in Apache Ambari and the potential impact on Hadoop clusters. Stay informed about CVE-2025-23196 and other vulnerabilities.

Zendesk Infrastructure Exploited in Phishing and Pig Butchering Schemes BitoPro Hack, Lazarus Group
  • Cyber Security

Zendesk Infrastructure Exploited in Phishing and Pig Butchering Schemes

Do Son January 21, 2025 0

Beware of Zendesk phishing campaigns using custom subdomains. Learn how threat actors are leveraging the platform's free trial to deceive unsuspecting users.

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-116606CVSS 9.3
    An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to...
    Admin intel📅 Updated: Nov 10, 2026
  • CVE-2026-125350
    Use after free in XML. Reported by anonymous on 2026-11-06. Google is aware that an exploit for CVE-2026-125350...
    Admin intel📅 Updated: Nov 10, 2026
  • CVE-2026-123751CVSS 9.8
    The WP Duplicate WordPress plugin through 1.1.11 does not properly verify a request authentication value and does not...
    Watchtower Verified📅 Updated: Nov 9, 2026
  • CVE-2026-111793CVSS 4.3
    Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted....
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-114713CVSS 8.6
    The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing...
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-116779CVSS 9.8
    Summary `sofia_presence_handle_sip_i_message()` splits the To user of an inbound SIP MESSAGE on `+` and treats the left half...
    CISA KEV📅 Added to KEV: Nov 9, 2026
  • CVE-2026-102895CVSS 9.8
    GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0,...
    CISA KEV📅 Added to KEV: Nov 9, 2026
  • CVE-2026-123158CVSS 8.1
    sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for...
    CISA KEV📅 Added to KEV: Nov 9, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-119446CVSS 9.4
    Session Fixation vulnerability in the CLI login flow in nerves-hub nerves_hub_web allows an unauthenticated attacker to obtain an...
    📅 Updated: Nov 10, 2026
  • CVE-2026-61949CVSS 9.3
    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Bookly Bookly bookly-responsive-appointment-booking-tool allows...
    📅 Updated: Nov 10, 2026
  • CVE-2026-13312CVSS 9.9
    A vulnerability that could allow an attacker to compromise a system.
    📅 Updated: Nov 10, 2026
  • CVE-2026-72868CVSS 9.9
    Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, apps/dokploy/server/api/routers/destination.ts interpolates the accessKey, secretAccessKey,...
    📅 Updated: Nov 10, 2026
  • CVE-2026-6715CVSS 9.8
    IBM Concert 1.0 through 3.0.1.1 allows an attacker can supply crafted input that is incorporated into an operating...
    📅 Updated: Nov 10, 2026
  • CVE-2026-17403CVSS 9.0
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to gain full...
    📅 Updated: Nov 10, 2026
  • CVE-2026-17409CVSS 9.4
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute unauthorized...
    📅 Updated: Nov 10, 2026
  • CVE-2026-17402CVSS 9.9
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute...
    📅 Updated: Nov 10, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.