Skip to content
November 10, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
Light/Dark Button
CVE-2024-52336 & CVE-2024-52337: Vulnerabilities in Linux Tuned Daemon CVE-2024-52336 & CVE-2024-52337
  • Linux
  • Vulnerability

CVE-2024-52336 & CVE-2024-52337: Vulnerabilities in Linux Tuned Daemon

Do Son December 1, 2024 0

Learn about the critical vulnerabilities in Linux Tuned daemon (CVE-2024-52336 and CVE-2024-52337) and the security risks they pose.

CVE-2024-11980 (CVSS 10): Critical Flaw in Billion Electric Routers CVE-2024-11980
  • Vulnerability

CVE-2024-11980 (CVSS 10): Critical Flaw in Billion Electric Routers

Do Son December 1, 2024 0

Learn about the critical CVE-2024-11980 vulnerability affecting Billion Electric routers. Discover the potential exploits and how to mitigate them.

How Not to Get Lost in Multi-Cloud Read our weekly threat intelligence report for mid-August 2026.
  • Technique

How Not to Get Lost in Multi-Cloud

Lusine Mkhitarian December 1, 2024 0
If you are reading this, you are probably weighing up a multi-cloud strategy. Perhaps a vendor, a...
Read More Read more about How Not to Get Lost in Multi-Cloud
CVE-2024-8672 (CVSS 9.9): Critical Flaw in Widget Options Plugin Threatens 100,000+ Websites CVE-2024-8672 - Widget Options
  • Vulnerability

CVE-2024-8672 (CVSS 9.9): Critical Flaw in Widget Options Plugin Threatens 100,000+ Websites

Do Son November 30, 2024 0

Learn about the critical security vulnerability (CVE-2024-8672) in the Widget Options plugin and how the latest release patches the issue.

Over-the-Air Vulnerabilities in Advantech EKI Access Points Put Industrial Networks at Risk Everon OCPP Vulnerability CVE-2026-26288 ASUSTOR ADM Vulnerability CVE-2026-24936 PrismX MX100 Vulnerability Hard-Coded Credentials Advantech Vulnerability CVE-2025-52694 Eaton UPS Companion, CVE-2025-59887 ASUS Router, Authentication Bypass ASUSTOR DLL Hijacking, Privilege Escalation OpenShift AI, Privilege Escalation GoAnywhere vulnerability CVE-2025-10035 LangChainGo, template injection DeepDiff, class pollution ToolShell Sunshine, CSRF Vulnerability KACE SMA, Critical Vulnerabilities Oracle Zero-Days - PDQ Deploy vulnerability
  • Vulnerability

Over-the-Air Vulnerabilities in Advantech EKI Access Points Put Industrial Networks at Risk

Do Son November 30, 2024 0

Uncover the critical vulnerabilities in Advantech EKI-6333AC-2G wireless access points. Explore the risks they pose to mission-critical industrial environments.

CVE-2024-52338: Critical Security Flaw in Apache Arrow R Package Allows Arbitrary Code Execution CVE-2024-52338
  • Vulnerability

CVE-2024-52338: Critical Security Flaw in Apache Arrow R Package Allows Arbitrary Code Execution

Do Son November 29, 2024 0

Stay protected from CVE-2024-52338 vulnerability in the Apache Arrow R package. Learn about the critical security flaw and its potential impact.

Malicious PyPI Package Targets Cryptocurrency Wallets: aiocpa Campaign Exposed ML Threat Hunting policy violation
  • Malware

Malicious PyPI Package Targets Cryptocurrency Wallets: aiocpa Campaign Exposed

Do Son November 29, 2024 0

Stay informed about the latest supply chain attack on cryptocurrency wallets via PyPI. Discover the malicious aiocpa package and steps to enhance your security.

ShadowHound: Enhancing Active Directory Reconnaissance with a Stealthy and Efficient Ingestor ShadowHound
  • Open Source Tool

ShadowHound: Enhancing Active Directory Reconnaissance with a Stealthy and Efficient Ingestor

Do Son November 29, 2024 0

Discover ShadowHound: a stealthy solution for effective Active Directory reconnaissance and BloodHound analysis.

CVE-2024-11667: Critical Vulnerability in Zyxel Firewalls Actively Exploited CVE-2024-11667
  • Malware
  • Vulnerability

CVE-2024-11667: Critical Vulnerability in Zyxel Firewalls Actively Exploited

Do Son November 28, 2024 0

Beware of the critical vulnerability CVE-2024-11667 in Zyxel firewalls. Learn how attackers are exploiting it to deploy Helldown ransomware.

Zero-Day in Active Directory Certificate Services: Researcher Exposes CVE-2024-49019 with PoC CVE-2024-52335 HylaFAX, AvantFAX vulnerability
  • Vulnerability

Zero-Day in Active Directory Certificate Services: Researcher Exposes CVE-2024-49019 with PoC

Do Son November 28, 2024 0

Discover the details of the critical zero-day vulnerability CVE-2024-49019 affecting Active Directory Certificate Services (AD CS).

Evasive Malware Campaign Leverages CleverSoar Installer & Nidhogg Rootkit CleverSoar Attack
  • Cyber Security
  • Malware

Evasive Malware Campaign Leverages CleverSoar Installer & Nidhogg Rootkit

Do Son November 28, 2024 0

Discover the newly identified CleverSoar installer and its targeted espionage efforts. Explore the advanced evasion techniques and malicious components used in this sophisticated malware campaign.

Malicious npm Packages Threaten Crypto Developers: Keylogging and Wallet Theft Revealed Crypto Developers
  • Malware

Malicious npm Packages Threaten Crypto Developers: Keylogging and Wallet Theft Revealed

Do Son November 28, 2024 0

Beware of a targeted campaign against crypto developers. Learn about the malicious npm packages and the risk they pose to cryptocurrency wallet credentials and sensitive data.

Integer Overflow Vulnerability in Windows Driver Enables Privilege Escalation, PoC Published Windows Secure Lock Screen Clock Lag Windows 11 KB5079391 error Windows 11 Kernel Driver Trust Microslop Windows 11 Windows 11 modem driver removal 2026, CVE-2025-24052 Agere driver exploit Windows 11 Password Icon Bug Lock Screen Glitch Windows 11 26H1 ARM Snapdragon X2 Windows 11 Reboot-Free, Insider Build Windows Update Error, 0x80070103 File Explorer, NTLM leak Windows bug, WinRE Windows Update, UAC prompts Secure Boot Certificate, Windows Security Windows 11 22H2 Installation security updates Windows UEFI CA 2023 Windows 11 25H2
  • Vulnerability
  • Windows

Integer Overflow Vulnerability in Windows Driver Enables Privilege Escalation, PoC Published

Do Son November 28, 2024 0

Uncover a critical vulnerability in Windows 11 23H2: Learn how an integer overflow in ksthunk.sys driver allows for privilege escalation.

Godot Engine Compromised: Malware Distributed via GodLoader mal
  • Malware

Godot Engine Compromised: Malware Distributed via GodLoader

Do Son November 28, 2024 0

Discover how cybercriminals are leveraging the Godot game engine to distribute malware. Learn about the GodLoader technique and how it evades detection.

Beyond FUD Links: Rockstar PaaS Kit Exploits Trusted Platforms for Phishing Rockstar kit
  • Cyber Security

Beyond FUD Links: Rockstar PaaS Kit Exploits Trusted Platforms for Phishing

Do Son November 28, 2024 0

Uncover the devious tactics of the Rockstar Phishing-as-a-Service (PaaS) kit to bypass email defenses and exploit trusted platforms.

Contiki-NG IoT OS Patches Critical Vulnerabilities Contiki-NG - CVE-2024-41125 & CVE-2024-41126
  • Vulnerability

Contiki-NG IoT OS Patches Critical Vulnerabilities

Do Son November 28, 2024 0

Critical vulnerabilities in Contiki-NG: Researchers discover flaws that can crash devices or execute malicious code in popular IoT operating system.

Credit Card Skimmer Malware Uncovered: Targeting Magento Checkout Pages XCharge C6 vulnerabilities EV charger security flaws GNU libtasn1 Vulnerability CVE-2025-13151 Credit Card Skimmer Malware CVE-2024-13892
  • Malware

Credit Card Skimmer Malware Uncovered: Targeting Magento Checkout Pages

Do Son November 28, 2024 0

Stay informed about the latest threat to Magento websites: credit card skimmer malware. Learn how it works and how to protect yourself.

TikTok Takes Aim at Appearance-Altering Filters and Underage Users in Latest Safety Push TikTok Appearance Filters
  • Technology

TikTok Takes Aim at Appearance-Altering Filters and Underage Users in Latest Safety Push

Do Son November 28, 2024 0

TikTok takes action to address concerns about appearance filters and underage use. Find out about the new measures and their potential impact on mental health.

CVE-2024-42330 (CVSS 9.1): Zabbix Patches Critical Remote Code Execution Vulnerability CVE-2024-42330 Zabbix Privilege Escalation CVE-2025-27237
  • Vulnerability

CVE-2024-42330 (CVSS 9.1): Zabbix Patches Critical Remote Code Execution Vulnerability

Do Son November 28, 2024 0

Urgent security updates released for Zabbix monitoring tool to address critical vulnerability (CVE-2024-42330) that could lead to code execution.

Massive Illegal Streaming Network Dismantled in Europe-Wide Operation Massive Illegal Streaming Network
  • Cyber Security

Massive Illegal Streaming Network Dismantled in Europe-Wide Operation

Do Son November 27, 2024 0

Law enforcement agencies successfully dismantle massive illegal streaming network. Get the details on the operation that targeted 102 suspects and resulted in 11 arrests.

Black Friday Fake Stores Surge 110%: How LLMs and Cheap Domains Empower Cybercrime Black Friday Fake Stores
  • Cyber Security

Black Friday Fake Stores Surge 110%: How LLMs and Cheap Domains Empower Cybercrime

Do Son November 27, 2024 0

Beware of Black Friday fake stores! Learn how cybercriminals are exploiting vulnerable shoppers with tempting discounts and replicas of legitimate online stores.

PixPirate Resurfaces: Spreading via WhatsApp and Expanding Beyond Brazil PixPirate malware WhatsApp
  • Malware

PixPirate Resurfaces: Spreading via WhatsApp and Expanding Beyond Brazil

Do Son November 27, 2024 0

Discover the resurgence of PixPirate malware targeting financial services through WhatsApp. Learn how this highly sophisticated threat has expanded its reach globally.

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-116606CVSS 9.3
    An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to...
    Admin intel📅 Updated: Nov 10, 2026
  • CVE-2026-125350
    Use after free in XML. Reported by anonymous on 2026-11-06. Google is aware that an exploit for CVE-2026-125350...
    Admin intel📅 Updated: Nov 10, 2026
  • CVE-2026-123751CVSS 9.8
    The WP Duplicate WordPress plugin through 1.1.11 does not properly verify a request authentication value and does not...
    Watchtower Verified📅 Updated: Nov 9, 2026
  • CVE-2026-111793CVSS 4.3
    Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted....
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-114713CVSS 8.6
    The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing...
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-116779CVSS 9.8
    Summary `sofia_presence_handle_sip_i_message()` splits the To user of an inbound SIP MESSAGE on `+` and treats the left half...
    CISA KEV📅 Added to KEV: Nov 9, 2026
  • CVE-2026-102895CVSS 9.8
    GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0,...
    CISA KEV📅 Added to KEV: Nov 9, 2026
  • CVE-2026-123158CVSS 8.1
    sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for...
    CISA KEV📅 Added to KEV: Nov 9, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-76954CVSS 9.8
    An improper neutralization of special elements used in an SQL command vulnerability in the Auth API in Synology...
    📅 Updated: Nov 10, 2026
  • CVE-2026-91241CVSS 9.1
    Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web Administration). Supported versions...
    📅 Updated: Nov 10, 2026
  • CVE-2026-121683CVSS 9.4
    Missing authentication in Ivanti Cloud Services Application version 5.0.8 allows a remote unauthenticated attacker to add and delete...
    📅 Updated: Nov 10, 2026
  • CVE-2026-83283CVSS 9.8
    Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security). The supported version...
    📅 Updated: Nov 10, 2026
  • CVE-2026-108186CVSS 9.6
    Improper Input Validation in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalation of...
    📅 Updated: Nov 10, 2026
  • CVE-2026-121653CVSS 9.8
    SQL injection in the Core of Ivanti Endpoint Manager before version 2024 SU8 allows a remote unauthenticated attacker...
    📅 Updated: Nov 10, 2026
  • CVE-2026-125758CVSS 9.1
    Aptabase before commit 61d4c01 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge sign-in links by...
    📅 Updated: Nov 10, 2026
  • CVE-2026-125757CVSS 9.4
    mailcow: dockerized before 2026-11 contains a server-side template injection vulnerability that allows domain administrators to execute commands in...
    📅 Updated: Nov 10, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.