Skip to content
November 10, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
Light/Dark Button
Sonatype Nexus Repository 2 Hit By RCE (CVE-2024-5082) and XSS (CVE-2024-5083) Flaws Nexus Repository RCE Supply Chain Security Nexus Repository Manager - CVE-2024-5082 & CVE-2024-5083
  • Vulnerability

Sonatype Nexus Repository 2 Hit By RCE (CVE-2024-5082) and XSS (CVE-2024-5083) Flaws

Do Son November 17, 2024 0

Are you using Nexus Repository Manager 2.x? Take action now to protect your systems from two critical vulnerabilities. Learn more about the security advisories and secure your software artifacts.

SafePay Ransomware: A New Threat with Sophisticated Techniques SafePay ransomware
  • Malware

SafePay Ransomware: A New Threat with Sophisticated Techniques

Do Son November 17, 2024 0

Uncover the details about SafePay ransomware: a stealthy and sophisticated strain with ties to known families like LockBit.

Chinese Threat Actor SilkSpecter Exploits Black Friday Frenzy with Sophisticated Phishing Campaign SilkSpecter Exploits Black Friday
  • Cyber Security

Chinese Threat Actor SilkSpecter Exploits Black Friday Frenzy with Sophisticated Phishing Campaign

Do Son November 17, 2024 0

Uncover the sophisticated SilkSpecter phishing campaign targeting e-commerce shoppers during Black Friday. Learn how this financially motivated threat actor lured victims with fake discounts.

PostgreSQL Releases Security Update Addressing Multiple Vulnerabilities PostgreSQL Security Update 2026 PostgreSQL CVE-2026-6637 Patch CVE-2024-10979 PostgreSQL vulnerability
  • Vulnerability

PostgreSQL Releases Security Update Addressing Multiple Vulnerabilities

Do Son November 17, 2024 0

Stay protected from PostgreSQL vulnerability with the latest important security update. Learn about the risks and how to mitigate them.

CVE-2024-10217 & CVE-2024-10218: TIBCO Hawk Faces Critical Security Risks TIBCO Operational Intelligence Hawk - CVE-2024-10217 & CVE-2024-10218
  • Vulnerability

CVE-2024-10217 & CVE-2024-10218: TIBCO Hawk Faces Critical Security Risks

Do Son November 17, 2024 0

Critical vulnerabilities in TIBCO Operational Intelligence Hawk platform: CVE-2024-10217 and CVE-2024-10218 pose high security risks.

PXA Stealer: New Malware Targets Governments and Education Across Europe and Asia PXA Stealer
  • Cyber Security
  • Malware

PXA Stealer: New Malware Targets Governments and Education Across Europe and Asia

Do Son November 17, 2024 0

Uncover the details of the sophisticated cyber campaign using the PXA Stealer malware to target government and educational sectors.

Apache Traffic Server Patches Critical Vulnerabilities in Latest Release Apache Traffic Server - CVE-2024-50306
  • Vulnerability

Apache Traffic Server Patches Critical Vulnerabilities in Latest Release

Do Son November 17, 2024 0

Learn about the critical vulnerabilities in Apache Traffic Server and the security update that addresses them. Keep your website safe from cyberattacks.

Glove Stealer Malware Bypasses Chrome Encryption, Steals Sensitive Data Glove Stealer
  • Malware

Glove Stealer Malware Bypasses Chrome Encryption, Steals Sensitive Data

Do Son November 17, 2024 0

Learn about the dangerous malware known as Glove Stealer and its tactics of stealing sensitive data through social engineering.

CVE-2024-8856: WP Time Capsule Plugin Vulnerability Exposes 20,000+ Sites to TakeOver Backup and Staging - CVE-2024-8856
  • Vulnerability

CVE-2024-8856: WP Time Capsule Plugin Vulnerability Exposes 20,000+ Sites to TakeOver

Do Son November 16, 2024 0

Learn about the critical vulnerability in WP Time Capsule (CVE-2024-8856) and its potential impact on website security.

Two-Step Phishing Technique Leveraging Microsoft Visio Files Exposed by Researchers two-step phishing technique
  • Cyber Security

Two-Step Phishing Technique Leveraging Microsoft Visio Files Exposed by Researchers

Do Son November 16, 2024 0

Discover the two-step phishing technique that exploits Microsoft Visio files and SharePoint to launch credential theft campaigns. Stay informed and protected.

CVE-2024-45784: Apache Airflow Vulnerability Exposes Sensitive Data in Logs Airflow Credential Leak, UI Redaction Failure CVE-2024-39877 & CVE-2024-45784 Airflow Connection Leak, CVE-2025-54831
  • Vulnerability

CVE-2024-45784: Apache Airflow Vulnerability Exposes Sensitive Data in Logs

Do Son November 16, 2024 0

Discover the potential security risks posed by a vulnerability in Apache Airflow (CVE-2024-45784). Ensure your system is protected.

Zero-Day Vulnerability in FortiClient Exploited by BrazenBamboo APT BrazenBamboo - DEEPPOST malware
  • Cyber Security
  • Malware
  • Vulnerability

Zero-Day Vulnerability in FortiClient Exploited by BrazenBamboo APT

Do Son November 15, 2024 0

Discover the latest cybersecurity threat: BrazenBamboo APT group exploits a zero-day vulnerability in FortiClient's Windows VPN client.

Cyber Espionage Campaign: North Korean Actors Deploy BeaverTail and InvisibleFerret North Korean Cyber Tactics
  • Malware

Cyber Espionage Campaign: North Korean Actors Deploy BeaverTail and InvisibleFerret

Do Son November 15, 2024 0

Uncover the evolving tactics of North Korean cybercriminals. Learn how the BeaverTail and InvisibleFerret malware strains exploit software developers and their systems.

New Melofee Backdoor Variant Targets Linux Systems with Advanced Stealth Tactics Melofee Backdoor
  • Malware

New Melofee Backdoor Variant Targets Linux Systems with Advanced Stealth Tactics

Do Son November 15, 2024 0

Explore the sophisticated Melofee backdoor variant targeting Linux systems. Understand its persistence, data exfiltration, and connection to the APT group Winnti.

CVE-2024-49369 (CVSS 9.8): Critical Flaw in Icinga 2 Allows for Impersonation and RCE CVE-2024-49369
  • Vulnerability

CVE-2024-49369 (CVSS 9.8): Critical Flaw in Icinga 2 Allows for Impersonation and RCE

Do Son November 15, 2024 0

Learn about the critical TLS certificate validation bypass vulnerability in Icinga 2 (CVE-2024-49369) and the urgent security updates released to address it.

PHP Reinfector Malware Wreaks Havoc on WordPress Sites Houzez theme - CVE-2024-22303 and CVE-2024-21743
  • Malware

PHP Reinfector Malware Wreaks Havoc on WordPress Sites

Do Son November 15, 2024 0

Discover the sophisticated PHP reinfector malware affecting WordPress sites. Find out how it reinfects files, plugins, and critical database tables.

How Does GPS Tracking Improve the ROI for Trucking Companies?
  • Technique

How Does GPS Tracking Improve the ROI for Trucking Companies?

Do Son November 15, 2024 0
In the competitive trucking industry, finding ways to enhance operational efficiency and reduce costs is critical. Implementing...
Read More Read more about How Does GPS Tracking Improve the ROI for Trucking Companies?
The Importance of Rapid Alarm Response in Emergency Situations PAN-OS vulnerability
  • Technique

The Importance of Rapid Alarm Response in Emergency Situations

Do Son November 15, 2024 0

Discover the importance of rapid alarm response in emergency situations. Learn how it can protect lives, properties, and create safer communities.

Palo Alto Networks Raises Alarm on Firewall Vulnerability Following Active Exploitation Palo Alto Networks Exploitation
  • Vulnerability

Palo Alto Networks Raises Alarm on Firewall Vulnerability Following Active Exploitation

Do Son November 15, 2024 0

Palo Alto Networks has issued an urgent update to a recent security advisory, raising the severity level to "Critical" after observing active exploitation of a remote code execution vulnerability

CVE-2024-11120 (CVSS 9.8): OS Command Injection Flaw in GeoVision Devices Actively Exploited, No Patch Cisco SD-WAN Vulnerability CVE-2026-20133 FortiGate Compromise Ivanti EPMM Zero-Day CVE-2026-1281 SmarterMail Vulnerability Storm-2603 WatchGuard Zero-Day, IKEv2 Out-of-Bounds Write Cisco Zero-Day, UAT-9686 Chinese APT FortiWeb RCE Exploitation CVE-2025-58034 VMware Zero-Day, Privilege Escalation Sitecore, remote code execution CVE-2025-53690 Windows CLFS, Privilege Escalation CVE-2024-47575 & CVE-2024-11120 CVE-2025-24983 vulnerability
  • Vulnerability

CVE-2024-11120 (CVSS 9.8): OS Command Injection Flaw in GeoVision Devices Actively Exploited, No Patch

Do Son November 15, 2024 0

Beware of CVE-2024-11120: A critical vulnerability in EOL GeoVision devices allows remote attackers to execute arbitrary system commands.

Bitfinex Hacker Sentenced to 5 Years for Massive Bitcoin Heist and Laundering Scheme CMDSS ZachXBT crypto theft, John Daghita U.S. Marshals investigation Bitfinex Hacker - DMM Bitcoin Cyberattack
  • Cyber Security

Bitfinex Hacker Sentenced to 5 Years for Massive Bitcoin Heist and Laundering Scheme

Do Son November 15, 2024 0

Learn about the 2016 Bitfinex hack and the sentencing of Ilya Lichtenstein for his role in one of the largest cryptocurrency heists in history.

Synology Issues Patches for Critical Camera Flaws Discovered at Pwn2Own Synology vulnerability
  • Vulnerability

Synology Issues Patches for Critical Camera Flaws Discovered at Pwn2Own

Do Son November 14, 2024 0

Learn about the recent zero-day vulnerabilities found in Synology camera products. Take action to protect your devices from potential attacks

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-116606CVSS 9.3
    An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to...
    Admin intel📅 Updated: Nov 10, 2026
  • CVE-2026-125350
    Use after free in XML. Reported by anonymous on 2026-11-06. Google is aware that an exploit for CVE-2026-125350...
    Admin intel📅 Updated: Nov 10, 2026
  • CVE-2026-123751CVSS 9.8
    The WP Duplicate WordPress plugin through 1.1.11 does not properly verify a request authentication value and does not...
    Watchtower Verified📅 Updated: Nov 9, 2026
  • CVE-2026-111793CVSS 4.3
    Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted....
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-114713CVSS 8.6
    The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing...
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-116779CVSS 9.8
    Summary `sofia_presence_handle_sip_i_message()` splits the To user of an inbound SIP MESSAGE on `+` and treats the left half...
    CISA KEV📅 Added to KEV: Nov 9, 2026
  • CVE-2026-102895CVSS 9.8
    GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0,...
    CISA KEV📅 Added to KEV: Nov 9, 2026
  • CVE-2026-123158CVSS 8.1
    sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for...
    CISA KEV📅 Added to KEV: Nov 9, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-76954CVSS 9.8
    An improper neutralization of special elements used in an SQL command vulnerability in the Auth API in Synology...
    📅 Updated: Nov 10, 2026
  • CVE-2026-91241CVSS 9.1
    Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web Administration). Supported versions...
    📅 Updated: Nov 10, 2026
  • CVE-2026-121683CVSS 9.4
    Missing authentication in Ivanti Cloud Services Application version 5.0.8 allows a remote unauthenticated attacker to add and delete...
    📅 Updated: Nov 10, 2026
  • CVE-2026-83283CVSS 9.8
    Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security). The supported version...
    📅 Updated: Nov 10, 2026
  • CVE-2026-108186CVSS 9.6
    Improper Input Validation in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalation of...
    📅 Updated: Nov 10, 2026
  • CVE-2026-121653CVSS 9.8
    SQL injection in the Core of Ivanti Endpoint Manager before version 2024 SU8 allows a remote unauthenticated attacker...
    📅 Updated: Nov 10, 2026
  • CVE-2026-125758CVSS 9.1
    Aptabase before commit 61d4c01 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge sign-in links by...
    📅 Updated: Nov 10, 2026
  • CVE-2026-125757CVSS 9.4
    mailcow: dockerized before 2026-11 contains a server-side template injection vulnerability that allows domain administrators to execute commands in...
    📅 Updated: Nov 10, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.