Skip to content
October 8, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
CVE-2024-51503: Trend Micro Deep Security Agent RCE Vulnerability Fixed Trend Micro Apex One CVE-2025-71210 AI Security Trend Micro Deep Security - CVE-2024-48904 & CVE-2024-51503
  • Vulnerability

CVE-2024-51503: Trend Micro Deep Security Agent RCE Vulnerability Fixed

Do Son November 20, 2024 0
Read More Read more about CVE-2024-51503: Trend Micro Deep Security Agent RCE Vulnerability Fixed
Why Are Cyber Security Promotional Campaigns Necessary for Cybersecurity Companies? BlackByte Ransomware Group
  • Technique

Why Are Cyber Security Promotional Campaigns Necessary for Cybersecurity Companies?

Do Son November 20, 2024 0
Read More Read more about Why Are Cyber Security Promotional Campaigns Necessary for Cybersecurity Companies?
Analysis & PoC Exploits Released for Palo Alto Zero-Days – CVE-2024-0012 and CVE-2024-9474 PoC
  • Vulnerability

Analysis & PoC Exploits Released for Palo Alto Zero-Days – CVE-2024-0012 and CVE-2024-9474

Do Son November 19, 2024 0
Read More Read more about Analysis & PoC Exploits Released for Palo Alto Zero-Days – CVE-2024-0012 and CVE-2024-9474
CVE-2024-21697: High Severity Flaw in Sourcetree Enables Remote Code Execution Sourcetree - CVE-2024-21697
  • Vulnerability

CVE-2024-21697: High Severity Flaw in Sourcetree Enables Remote Code Execution

Do Son November 19, 2024 0
Read More Read more about CVE-2024-21697: High Severity Flaw in Sourcetree Enables Remote Code Execution
Google Chrome Patches High-Severity Flaw CVE-2024-11395 in Latest Stable Release CVE-2024-11395
  • Vulnerability

Google Chrome Patches High-Severity Flaw CVE-2024-11395 in Latest Stable Release

Do Son November 19, 2024 0
Read More Read more about Google Chrome Patches High-Severity Flaw CVE-2024-11395 in Latest Stable Release
CVE-2024-21287: Critical Zero-Day Exploited in Oracle Agile PLM Oracle Agile PLM - CVE-2024-21287
  • Vulnerability

CVE-2024-21287: Critical Zero-Day Exploited in Oracle Agile PLM

Do Son November 19, 2024 0
Read More Read more about CVE-2024-21287: Critical Zero-Day Exploited in Oracle Agile PLM
Gabagool: A Sophisticated Phishing Kit Exploiting Cloudflare R2 Gabagool Phishing Kit
  • Cyber Security

Gabagool: A Sophisticated Phishing Kit Exploiting Cloudflare R2

Do Son November 19, 2024 0
Read More Read more about Gabagool: A Sophisticated Phishing Kit Exploiting Cloudflare R2
CVE-2024-47533 (CVSS 9.8): Cobbler Vulnerability Exposes Linux Servers to Compromise CVE-2024-47533
  • Vulnerability

CVE-2024-47533 (CVSS 9.8): Cobbler Vulnerability Exposes Linux Servers to Compromise

Do Son November 19, 2024 0
Read More Read more about CVE-2024-47533 (CVSS 9.8): Cobbler Vulnerability Exposes Linux Servers to Compromise
CVE-2024-42057: Exploited by Helldown Ransomware to Target Linux Helldown ransomware Linux
  • Malware
  • Vulnerability

CVE-2024-42057: Exploited by Helldown Ransomware to Target Linux

Do Son November 19, 2024 0
Read More Read more about CVE-2024-42057: Exploited by Helldown Ransomware to Target Linux
Bitwarden Users Targeted in Malicious Facebook Ad Campaign Bitwarden browser extension
  • Malware

Bitwarden Users Targeted in Malicious Facebook Ad Campaign

Do Son November 19, 2024 0
Read More Read more about Bitwarden Users Targeted in Malicious Facebook Ad Campaign
Wget Vulnerability (CVE-2024-10524) Opens Door to SSRF Attacks CVE-2024-10524
  • Vulnerability

Wget Vulnerability (CVE-2024-10524) Opens Door to SSRF Attacks

Do Son November 19, 2024 0
Read More Read more about Wget Vulnerability (CVE-2024-10524) Opens Door to SSRF Attacks
ClickFix: The Rising Threat of Clipboard-Based Social Engineering ChatGPT impersonation used in ClickFix payload delivery
  • Malware

ClickFix: The Rising Threat of Clipboard-Based Social Engineering

Do Son November 19, 2024 0
Read More Read more about ClickFix: The Rising Threat of Clipboard-Based Social Engineering
CVE-2024-47208 & CVE-2024-48962: Apache OFBiz Exposed to Remote Code Execution Apache OFBiz RCE, Unrestricted File Upload CVE-2024-47208 and CVE-2024-48962
  • Vulnerability

CVE-2024-47208 & CVE-2024-48962: Apache OFBiz Exposed to Remote Code Execution

Do Son November 19, 2024 0
Read More Read more about CVE-2024-47208 & CVE-2024-48962: Apache OFBiz Exposed to Remote Code Execution
DONOT APT Group Targets Pakistan’s Maritime and Defense Sectors in New Campaign DONOT APT group
  • Cyber Security

DONOT APT Group Targets Pakistan’s Maritime and Defense Sectors in New Campaign

Do Son November 19, 2024 0
Read More Read more about DONOT APT Group Targets Pakistan’s Maritime and Defense Sectors in New Campaign
CVE-2024-44308 and CVE-2024-44309: Apple Addresses Zero-Day Vulnerabilities DarkSword exploit kit iOS 18.7.7 security update CVE-2024-44308 & CVE-2024-44309 Apple appeal, Epic Games lawsuit
  • Vulnerability

CVE-2024-44308 and CVE-2024-44309: Apple Addresses Zero-Day Vulnerabilities

Do Son November 19, 2024 0
Read More Read more about CVE-2024-44308 and CVE-2024-44309: Apple Addresses Zero-Day Vulnerabilities
CISA Warns of Actively Exploited Vulnerabilities in Kemp LoadMaster and Palo Alto Networks PAN-OS State-Sponsored Exploitation CISA KEV Catalog F5 BIG-IP RCE CISA KEV Catalog SolarWinds WHD Exploit CVE-2025-40551 Zimbra XSS Zero-Day CVE-2025-27915 Exploited Windows Security Vulnerabilities
  • Vulnerability

CISA Warns of Actively Exploited Vulnerabilities in Kemp LoadMaster and Palo Alto Networks PAN-OS

Do Son November 19, 2024 0
Read More Read more about CISA Warns of Actively Exploited Vulnerabilities in Kemp LoadMaster and Palo Alto Networks PAN-OS
Phobos Ransomware Administrator Extradited to US to Face Charges Evgenii Ptitsyn - Phobos ransomware
  • Cyber Security
  • Malware

Phobos Ransomware Administrator Extradited to US to Face Charges

Do Son November 19, 2024 0
Read More Read more about Phobos Ransomware Administrator Extradited to US to Face Charges
Phishing Alert: Government Impersonation Attacks Surge via DocuSign DocuSign phishing attacks
  • Cyber Security

Phishing Alert: Government Impersonation Attacks Surge via DocuSign

Do Son November 19, 2024 0
Read More Read more about Phishing Alert: Government Impersonation Attacks Surge via DocuSign
From CVE to PoC: A Collection Maps Windows Privilege Escalation Landscape Windows Privilege Escalation Vulnerabilities
  • Vulnerability

From CVE to PoC: A Collection Maps Windows Privilege Escalation Landscape

Do Son November 18, 2024 0
Read More Read more about From CVE to PoC: A Collection Maps Windows Privilege Escalation Landscape
CVE-2024-52308: GitHub CLI Vulnerability Could Allow Remote Code Execution CVE-2024-52308
  • Vulnerability

CVE-2024-52308: GitHub CLI Vulnerability Could Allow Remote Code Execution

Do Son November 18, 2024 0
Read More Read more about CVE-2024-52308: GitHub CLI Vulnerability Could Allow Remote Code Execution
LibreNMS Vulnerability (CVE-2024-51092): Mitigating the Risk of Server Compromise CVE-2024-51092 - LibreNMS
  • Vulnerability

LibreNMS Vulnerability (CVE-2024-51092): Mitigating the Risk of Server Compromise

Do Son November 18, 2024 0
Read More Read more about LibreNMS Vulnerability (CVE-2024-51092): Mitigating the Risk of Server Compromise
Actively Exploited VMware Vulnerabilities (CVE-2024-38812 & CVE-2024-38813) Threaten Virtualized Infrastructure Exploited VMware
  • Vulnerability

Actively Exploited VMware Vulnerabilities (CVE-2024-38812 & CVE-2024-38813) Threaten Virtualized Infrastructure

Do Son November 18, 2024 0
Read More Read more about Actively Exploited VMware Vulnerabilities (CVE-2024-38812 & CVE-2024-38813) Threaten Virtualized Infrastructure
❮ Prev Page
Next Page ❯

Search

Translation

CVE ALERTS
πŸ“ˆ

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

πŸ›‘οΈ

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

πŸ™

GitHub Issues
Auto-create alert tickets without duplication.

πŸ“¬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

πŸ”€

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days β†’

🚨 Active Exploits in the Wild

  • CVE-2026-94504CVSS 7.2
    Ninja Forms 3.15.3 stores an anonymous non-RTE textarea value and renders it without safe HTML encoding in the...
    Admin intel📅 Updated: Oct 7, 2026
  • CVE-2026-93836CVSS 7.2
    The WPC Product Bundles for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \'qty\'...
    Admin intel📅 Updated: Oct 7, 2026
  • CVE-2026-21589CVSS 9.3
    This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software...
    Admin intel📅 Updated: Oct 7, 2026
  • CVE-2026-61500CVSS 9.3
    Rejetto HFS 3.0.0 through 3.2.0 derives its session-cookie signing key from the non-cryptographic Math.random() generator and discloses outputs...
    Admin intel📅 Updated: Oct 7, 2026
  • CVE-2026-88779CVSS 8.7
    Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS,...
    Admin intelCISA KEV📅 Added to KEV: Oct 4, 2026📅 Updated: Oct 4, 2026
  • CVE-2026-102490CVSS 8.5
    All versions of Zammad including the latest alpha enable the local zammad user to escalate privileges to root.
    Admin intelCISA KEV📅 Added to KEV: Oct 2, 2026📅 Updated: Oct 2, 2026
  • CVE-2026-102489CVSS 8.7
    Zammad versions 6.3.0 to 6.5.4 are vulnerable a session hijack vulnerability that leads to remote code execution as...
    Admin intelCISA KEV📅 Added to KEV: Oct 2, 2026📅 Updated: Oct 2, 2026
  • CVE-2026-100382CVSS 10.0
    Improper Neutralization of Special Elements used in an OS Command (\'OS Command Injection\') vulnerability in Wikimedia Foundation Mediawiki...
    Admin intel📅 Updated: Oct 1, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-9209CVSS 9.3
    mJobTime through build 15.7.3.32 contains an unauthenticated SQL execution vulnerability in the Login.aspx admin panel handlers, where the...
    📅 Updated: Oct 8, 2026
  • CVE-2026-95606CVSS 9.8
    Deserialization of Untrusted Data vulnerability in Liquid Web / StellarWP The Events Calendar allows Object Injection. This issue...
    📅 Updated: Oct 8, 2026
  • CVE-2026-95605CVSS 9.3
    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Passionate Programmer Peter WP...
    📅 Updated: Oct 8, 2026
  • CVE-2026-85097CVSS 9.8
    The Bricksforge plugin for WordPress is vulnerable to unauthenticated arbitrary file upload in versions up to, and including,...
    📅 Updated: Oct 8, 2026
  • CVE-2026-17609CVSS 9.1
    The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Arbitrary Directory Deletion...
    📅 Updated: Oct 8, 2026
  • CVE-2022-37897CVSS 9.8
    There is a command injection vulnerability that could lead to unauthenticated remote code execution by sending specially crafted...
    📅 Updated: Oct 8, 2026
  • CVE-2026-105110CVSS 9.3
    OS Command Injection in the login.xgi CGI endpoint in Iskratel Innbox GPON ONT devices allows an unauthenticated remote...
    📅 Updated: Oct 8, 2026
  • CVE-2026-61447CVSS 10.0
    ### Summary `CodeAgent._execute_python()` executes LLM-generated Python code in a subprocess with the complete parent-process environment (`os.environ.copy()`), zero AST...
    📅 Updated: Oct 8, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q2 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
Β© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.