Skip to content
November 10, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
Light/Dark Button
Secure Your Repos: go-git Patches Critical Vulnerability – CVE-2025-21613 (CVSS 9.8) CVE-2025-21613 & CVE-2025-21614
  • Vulnerability

Secure Your Repos: go-git Patches Critical Vulnerability – CVE-2025-21613 (CVSS 9.8)

Do Son January 7, 2025 0

Protect your Git repositories from security vulnerabilities. Learn about the critical flaws (CVE-2025-21613 & CVE-2025-21614) addressed in go-git v5.13.

CVE-2024-51741 and CVE-2024-46981: Redis Flaws Expose Millions to DoS and RCE Risks Redis RCE, HyperLogLog Vulnerability CVE-2024-51741 - CVE-2024-46981
  • Vulnerability

CVE-2024-51741 and CVE-2024-46981: Redis Flaws Expose Millions to DoS and RCE Risks

Do Son January 6, 2025 0

Protect your Redis database from vulnerabilities. Learn about the risks of CVE-2024-51741 and CVE-2024-46981 and how to mitigate them.

CVE-2024-43096 and More: Critical RCE Flaws Patched in Android Security Update Android Zero-Click RCE CVE-2026-0073 Android sideloading CVE-2024-43096, CVE-2024-43770, CVE-2024-43771, CVE-2024-49747 and, CVE-2024-49748
  • Android
  • Vulnerability

CVE-2024-43096 and More: Critical RCE Flaws Patched in Android Security Update

Do Son January 6, 2025 0

Learn about the critical Android security vulnerabilities and the importance of applying updates immediately. Find out about CVE-2024-43096.

CVE-2024-20154: Critical RCE Flaw in MediaTek Chipsets Impacts Millions MediaTek Modem Vulnerabilities, January 2026 Security Bulletin MediaTek Vulnerabilities, Chipset Security CVE-2024-20103 & CVE-2024-20100 - CVE-2024-20154 - February 2025 Product Security Bulletin
  • Vulnerability

CVE-2024-20154: Critical RCE Flaw in MediaTek Chipsets Impacts Millions

Do Son January 6, 2025 0

MediaTek's January 2025 Product Security Bulletin addresses CVE-2024-20154, a critical RCE vulnerability in modem firmware, affecting over 40 device models.

Thousands of SonicWall Devices Remain Vulnerable to CVE-2024-40766 PyPI Packages Leak
  • Malware
  • Vulnerability

Thousands of SonicWall Devices Remain Vulnerable to CVE-2024-40766

Do Son January 6, 2025 0

Uncover the details of CVE-2024-40766 vulnerability in SonicWall NSA devices and the alarming number of organizations still exposed to it.

Exploiting Misconfigurations in Argo Workflows for Kubernetes Cluster Takeover Argo CD Secret Leak CVE-2026-42880 CVE-2024-28175 Argo CD DoS, Webhook Flaws
  • Vulnerability

Exploiting Misconfigurations in Argo Workflows for Kubernetes Cluster Takeover

Do Son January 6, 2025 0

Discover the risks of Argo misconfigurations in Kubernetes. Find out how attackers can compromise entire clusters and how to prevent it.

CVE-2024-8474: OpenVPN Connect Vulnerability Leaks Private Keys CVE-2023-46850 - CVE-2024-8474
  • Vulnerability Report

CVE-2024-8474: OpenVPN Connect Vulnerability Leaks Private Keys

Do Son January 6, 2025 0

Discover the vulnerability (CVE-2024-8474) that could have exposed your private keys and decrypted your VPN traffic. Stay protected with a secure VPN connection

Vulnerability Overload: 40,000+ CVEs in 2024 CVE 2024
  • Vulnerability

Vulnerability Overload: 40,000+ CVEs in 2024

Do Son January 6, 2025 0

Stay informed about the record-breaking surge in CVE publications. Explore the key highlights from the annual CVE data review for 2024.

Beware of PhishWP: New WordPress Plugin Targets Online Shoppers WordPress Backdoor
  • Cyber Security

Beware of PhishWP: New WordPress Plugin Targets Online Shoppers

Do Son January 6, 2025 0

Beware of PhishWP: a dangerous WordPress plugin that disguises itself as a legitimate tool but actually steals your sensitive information.

EAGERBEE: Advanced Backdoor Targets Middle Eastern ISPs and Government Entities EAGERBEE backdoor
  • Cyber Security
  • Malware

EAGERBEE: Advanced Backdoor Targets Middle Eastern ISPs and Government Entities

Do Son January 6, 2025 0

Uncover the advanced cyberespionage campaign using the EAGERBEE backdoor to infiltrate ISPs and governmental institutions in the Middle East.

Windows 11’s TPM 2.0: Free Software Foundation Fights Forced Upgrades and E-Waste Windows 11's TPM 2.0
  • Technology
  • Windows

Windows 11’s TPM 2.0: Free Software Foundation Fights Forced Upgrades and E-Waste

Do Son January 6, 2025 0

The Free Software Foundation takes a stand against Microsoft's controversial TPM 2.0 requirement for Windows 11. Learn about the potential security risks and the importance of free software.

CVE-2024-43452: PoC Exploit Released for Windows Elevation of Privilege Bug CVE-2024-43452 PoC exploit
  • Vulnerability
  • Windows

CVE-2024-43452: PoC Exploit Released for Windows Elevation of Privilege Bug

Do Son January 5, 2025 0

Security researchers published the technical details and a PoC exploit code for CVE-2024-43452, a Windows Registry Elevation of Privilege flaw

CVE-2024-9138 and CVE-2024-9140 (CVSS 9.8): Moxa Calls for Immediate Security Action Moxa Linux kernel vulnerabilities Moxa Vulnerability CVE-2024-12297 Moxa OpenSSH Vulnerability CVE-2023-38408 CVE-2023-5961 - CVE-2024-9138 and CVE-2024-9140
  • Vulnerability

CVE-2024-9138 and CVE-2024-9140 (CVSS 9.8): Moxa Calls for Immediate Security Action

Do Son January 5, 2025 0

Critical vulnerabilities identified in Moxa's routers and network security appliances. Find out how CVE-2024-9140 and CVE-2024-9138 pose a risk to your infrastructure and data security.

NonEuclid RAT—A Sophisticated Tool in the Cybercrime Arsenal Mercenary Akula European Financial Targeting AI-Generated Malware React2Shell Exploit UAT-8837 Critical Infrastructure Attack APT36, BOSS Linux BRICKSTORM Malware, China Espionage Curly COMrades, MucorAgent Chinese APT - HTTP Client Tools Shuckworm Cyber Espionage
  • Malware

NonEuclid RAT—A Sophisticated Tool in the Cybercrime Arsenal

Do Son January 5, 2025 0

Explore the sophisticated NonEuclid RAT and its evolution in malware sophistication. Discover its ransomware encryption and anti-VM checks.

CryptBot Infostealer Returns with Sophisticated Tactics for Initial Access PHP RCE vulnerability
  • Malware

CryptBot Infostealer Returns with Sophisticated Tactics for Initial Access

Do Son January 5, 2025 0

Stay informed about the resurfacing of CryptBot, a dangerous information-stealing malware. Learn how it uses advanced tactics to target unsuspecting victims.

GoCD Patches Critical Vulnerability Allowing User Privilege Escalation GoCD vulnerability
  • Vulnerability

GoCD Patches Critical Vulnerability Allowing User Privilege Escalation

Do Son January 5, 2025 0

Stay informed about the latest security update for GoCD. Learn about the critical vulnerability and how to protect your system from unauthorized access.

Malicious Packages Weaponize OAST for Stealthy Data Exfiltration and Reconnaissance GuLoader Malware CloudEye Obfuscation npm, malware Ethereum, npm supply chain OAST techniques StilachiRAT macOS Malware PasivRobber
  • Cyber Security
  • Malware

Malicious Packages Weaponize OAST for Stealthy Data Exfiltration and Reconnaissance

Do Son January 5, 2025 0

Uncover the misuse of OAST techniques by threat actors. Learn how ethical security assessments tools are being hijacked for nefarious purposes.

Hackers Exploit Social Security Administration Branding to Deliver ConnectWise RAT phishing-3390518_1280
  • Cyber Security

Hackers Exploit Social Security Administration Branding to Deliver ConnectWise RAT

Do Son January 5, 2025 0

Beware of the new phishing campaign using ConnectWise RAT. Hackers are impersonating the SSA to steal sensitive information.

Cybersecurity Alert: FireScam—The Android Malware Disguised as Telegram Premium BadBox 2.0, Android Botnet Alien spyware - CVE-2024-43093
  • Malware

Cybersecurity Alert: FireScam—The Android Malware Disguised as Telegram Premium

Do Son January 5, 2025 0

Beware of FireScam: a dangerous Android malware posing as Telegram Premium app. Learn how cybercriminals exploit unsuspecting users and steal sensitive information.

CVE-2024-10957 Exposes Over 3 Million WordPress Sites to Unauthenticated PHP Object Injection Exploits WordPress POP chain attack - CVE-2024-10957
  • Vulnerability

CVE-2024-10957 Exposes Over 3 Million WordPress Sites to Unauthenticated PHP Object Injection Exploits

Do Son January 4, 2025 0

Find out how the CVE-2024-10957 vulnerability in the UpdraftPlus Backup & Migration plugin exposed WordPress sites to potential attacks.

MISP Unveils the Threat Actor Naming Standard Iranian Hacktivists Operation Epic Fury Cyber New Generation Warfare Russian Hybrid Escalation Plex data breach Water Systems Cybersecurity - Threat Actor Naming Standard
  • Cyber Security

MISP Unveils the Threat Actor Naming Standard

Do Son January 4, 2025 0

Addressing the challenges in threat intelligence workflows: learn about the Threat Actor Naming (RFC) standard and its impact on cybersecurity information sharing.

Atos Responds to Space Bears Ransomware Allegations Space Bears group
  • Cyber Security
  • Data Leak

Atos Responds to Space Bears Ransomware Allegations

Do Son January 4, 2025 0

Discover the response of Atos, a global leader in digital transformation and cybersecurity, to the allegations made by Space Bears ransomware group.

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-116606CVSS 9.3
    An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to...
    Admin intel📅 Updated: Nov 10, 2026
  • CVE-2026-125350
    Use after free in XML. Reported by anonymous on 2026-11-06. Google is aware that an exploit for CVE-2026-125350...
    Admin intel📅 Updated: Nov 10, 2026
  • CVE-2026-123751CVSS 9.8
    The WP Duplicate WordPress plugin through 1.1.11 does not properly verify a request authentication value and does not...
    Watchtower Verified📅 Updated: Nov 9, 2026
  • CVE-2026-111793CVSS 4.3
    Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted....
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-114713CVSS 8.6
    The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing...
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-116779CVSS 9.8
    Summary `sofia_presence_handle_sip_i_message()` splits the To user of an inbound SIP MESSAGE on `+` and treats the left half...
    CISA KEV📅 Added to KEV: Nov 9, 2026
  • CVE-2026-102895CVSS 9.8
    GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0,...
    CISA KEV📅 Added to KEV: Nov 9, 2026
  • CVE-2026-123158CVSS 8.1
    sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for...
    CISA KEV📅 Added to KEV: Nov 9, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-119446CVSS 9.4
    Session Fixation vulnerability in the CLI login flow in nerves-hub nerves_hub_web allows an unauthenticated attacker to obtain an...
    📅 Updated: Nov 10, 2026
  • CVE-2026-61949CVSS 9.3
    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Bookly Bookly bookly-responsive-appointment-booking-tool allows...
    📅 Updated: Nov 10, 2026
  • CVE-2026-13312CVSS 9.9
    A vulnerability that could allow an attacker to compromise a system.
    📅 Updated: Nov 10, 2026
  • CVE-2026-72868CVSS 9.9
    Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, apps/dokploy/server/api/routers/destination.ts interpolates the accessKey, secretAccessKey,...
    📅 Updated: Nov 10, 2026
  • CVE-2026-6715CVSS 9.8
    IBM Concert 1.0 through 3.0.1.1 allows an attacker can supply crafted input that is incorporated into an operating...
    📅 Updated: Nov 10, 2026
  • CVE-2026-17403CVSS 9.0
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to gain full...
    📅 Updated: Nov 10, 2026
  • CVE-2026-17409CVSS 9.4
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute unauthorized...
    📅 Updated: Nov 10, 2026
  • CVE-2026-17402CVSS 9.9
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute...
    📅 Updated: Nov 10, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.