Skip to content
November 11, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
Light/Dark Button
Rhadamanthys Evolves: AI-Powered Crypto Theft with Version 0.7.0 Rhadamanthys version 0.7.0
  • Malware

Rhadamanthys Evolves: AI-Powered Crypto Theft with Version 0.7.0

Do Son September 30, 2024 0

Discover the powerful new features of Rhadamanthys Stealer version 0.7.0: weaponized AI and OCR technology for advanced data theft.

Can Telecoms Fraud Be Eliminated? pbx
  • Technique

Can Telecoms Fraud Be Eliminated?

Do Son September 30, 2024 0

Telecoms fraud features prominently on Interpol’s crime lists and is a worldwide, recognised cybercrime. But can fraud be eliminated?

League of Legends Fans Targeted: Beware the Lumma Stealer Lurking in Fake Ads! League of Legends
  • Malware

League of Legends Fans Targeted: Beware the Lumma Stealer Lurking in Fake Ads!

Do Son September 30, 2024 0

Beware of cybercriminals using the League of Legends World Championship to distribute malware. Discover how scammers are tricking fans with deceptive ads.

Multiple Vulnerabilities Discovered in PHP, Prompting Urgent Security Updates PHP Vulnerability PHP Licensing, Open Source
  • Vulnerability

Multiple Vulnerabilities Discovered in PHP, Prompting Urgent Security Updates

Do Son September 29, 2024 0

Stay updated on the latest PHP vulnerability advisory. Learn about the potential log tampering, file inclusion, and data integrity violations.

CVE-2024-26808: PoC Exploit Shows Local Privilege Escalation Risk in Linux CVE-2024-26808 PoC exploit
  • Linux
  • Vulnerability

CVE-2024-26808: PoC Exploit Shows Local Privilege Escalation Risk in Linux

Do Son September 29, 2024 0

Explore the technical details and exploit PoC of CVE-2024-26808, a critical flaw in the Linux kernel. Stay updated and secure your system.

CVE-2024-8353 (CVSS 10): Critical GiveWP Flaw, 100k WordPress Sites at Risk CVE-2024-8353 - GiveWP
  • Vulnerability

CVE-2024-8353 (CVSS 10): Critical GiveWP Flaw, 100k WordPress Sites at Risk

Do Son September 29, 2024 0

Discover the details of the critical vulnerability CVE-2024-8353 in GiveWP donation plugin for WordPress and the potential impact on your website.

Critical XSS Flaw Discovered in Filament: CVE-2024-47186 Requires Urgent Update for Laravel Developers Laravel development - CVE-2024-47186
  • Vulnerability

Critical XSS Flaw Discovered in Filament: CVE-2024-47186 Requires Urgent Update for Laravel Developers

Do Son September 29, 2024 0

Learn about the critical security advisory for CVE-2024-47186 issued by the Filament project. Discover how this XSS vulnerability affects Laravel applications and the potential risks it poses.

Advanced Cyberattacks: Patchwork APT’s Nexe Backdoor Campaign Exposed Nexe backdoor
  • Cyber Security
  • Malware

Advanced Cyberattacks: Patchwork APT’s Nexe Backdoor Campaign Exposed

Do Son September 29, 2024 0

Learn about the advanced tactics of the Patchwork APT group with their recent use of the Nexe backdoor in a cyber-espionage campaign.

Critical SolarWinds Flaw Exposes 827 Instances: PoC Exploit Unveiled for CVE-2024-28987 CVE-2024-28987-target
  • Vulnerability

Critical SolarWinds Flaw Exposes 827 Instances: PoC Exploit Unveiled for CVE-2024-28987

Do Son September 29, 2024 0

Discover the details & PoC exploit for the critical SolarWinds WHD flaw CVE-2024-28987. Protect your organization's sensitive IT support data

KLogEXE & FPSpy Backdoor: Kimsuky’s Evolving Cyber Espionage Arsenal Sparkling Pisces - KLogEXE - FPSpy backdoor
  • Malware

KLogEXE & FPSpy Backdoor: Kimsuky’s Evolving Cyber Espionage Arsenal

Do Son September 29, 2024 0

Uncover the latest cyber-espionage activities of Sparkling Pisces, a notorious North Korean APT group. Learn about their evolving capabilities and targeted sectors.

.NET Loaders and Stealthy Persistence: BBTok Trojan’s New Tricks BBTok banking trojan
  • Malware

.NET Loaders and Stealthy Persistence: BBTok Trojan’s New Tricks

Do Son September 29, 2024 0

Protect yourself from advanced malware threats. Understand the techniques employed by BBTok banking trojan in its complex infection chain.

Storm-0501 Targets Hybrid Clouds with Evolving Ransomware Tactics Storm-0501 - Embargo ransomware
  • Cyber Security
  • Malware

Storm-0501 Targets Hybrid Clouds with Evolving Ransomware Tactics

Do Son September 29, 2024 0

Stay informed about the activities of Storm-0501, a financially driven cybercriminal group targeting organizations with hybrid cloud setups.

Bypassing Security: DCRat Deployed via HTML Smuggling DCRat
  • Malware

Bypassing Security: DCRat Deployed via HTML Smuggling

Do Son September 28, 2024 0

Learn about the first observed use of HTML smuggling by DCRat, a powerful remote access trojan. Find out how this technique allows cybercriminals to deploy malware undetected.

Fake WalletConnect App on Google Play Drains $70K in Crypto Workflow-of-the-malicious-application
  • Cyber Security

Fake WalletConnect App on Google Play Drains $70K in Crypto

Do Son September 28, 2024 0

Beware of Crypto Drainer: Learn how scammers are using fake apps to steal your cryptocurrency and how to protect yourself from becoming a victim.

CVE-2024-43917 (CVSS 9.3): Unpatched SQLi Flaw in TI WooCommerce Wishlist Threatens 100,000+ Sites TI WooCommerce Wishlist - CVE-2024-43917
  • Vulnerability

CVE-2024-43917 (CVSS 9.3): Unpatched SQLi Flaw in TI WooCommerce Wishlist Threatens 100,000+ Sites

Do Son September 27, 2024 0

Stay alert! Over 100,000 websites at risk due to CVE-2024-43917 in TI WooCommerce Wishlist. Learn how to mitigate the risk and secure your site.

SloppyLemming’s Espionage Campaign Targets South Asia SloppyLemming
  • Cyber Security

SloppyLemming’s Espionage Campaign Targets South Asia

Do Son September 27, 2024 0

Uncover the details of SloppyLemming, a cyber threat actor targeting government and telecom sectors in South and East Asia.

Critical WatchGuard Vulnerabilities Discovered: CVE-2024-6592 and CVE-2024-6593 WatchGuard Agent Privilege Escalation CVE-2026-6787 WatchGuard Vulnerability CVE-2026-1498 WatchGuard Firebox VPN Flaws, Command Injection WatchGuard Vulnerability CVE-2024-6592 and CVE-2024-6593
  • Vulnerability

Critical WatchGuard Vulnerabilities Discovered: CVE-2024-6592 and CVE-2024-6593

Do Son September 27, 2024 0

Critical vulnerabilities found in WatchGuard's Authentication Gateway and Single Sign-On Client software. Learn about CVE-2024-6592 and CVE-2024-6593.

Critical Vulnerabilities in Kia’s Dealer Portal Expose Millions of Vehicles to Remote Hijacking Kia vehicles hacking
  • Vulnerability

Critical Vulnerabilities in Kia’s Dealer Portal Expose Millions of Vehicles to Remote Hijacking

Do Son September 27, 2024 0

Critical vulnerabilities discovered in Kia's dealer portal. Learn how hackers can exploit these flaws to gain remote control of parked Kia vehicles.

HashiCorp Vault Flaw (CVE-2024-759): Unrestricted SSH Access Threatens System Security HashiCorp Vault, vulnerability CVE-2024-7594 - Vault Community Edition
  • Vulnerability

HashiCorp Vault Flaw (CVE-2024-759): Unrestricted SSH Access Threatens System Security

Do Son September 26, 2024 0

Important security alert: Discover the CVE-2024-7594 flaw in HashiCorp Vault that could grant attackers unrestricted SSH access.

Critical WhatsUp Gold Vulnerabilities Demand Immediate Action CVE-2024-46909 & CVE-2024-8785 OpenEdge, Remote Command Execution
  • Vulnerability

Critical WhatsUp Gold Vulnerabilities Demand Immediate Action

Do Son September 26, 2024 0

Learn about the critical flaws discovered in WhatsUp Gold, including CVE-2024-46909 & CVE-2024-8785, and the potential risks they pose for network infrastructure.

VLC Media Player Update Needed: CVE-2024-46461 Discovered CVE-2024-46461 - VLC media player
  • Vulnerability

VLC Media Player Update Needed: CVE-2024-46461 Discovered

Do Son September 26, 2024 0

URGENT: Update your VLC media player now! Don't risk crashes or code execution. Learn about CVE-2024-46461 and protect yourself.

Flax Typhoon Botnet Exploits 66 Vulnerabilities: A Global Threat to Critical Infrastructure hackerbot-claw campaign Cisco RCE Exploit CVE-2026-20045 SonicWall VPN, Akira Ransomware Nobelium Apache Tomcat, Apache Camel
  • Malware
  • Vulnerability

Flax Typhoon Botnet Exploits 66 Vulnerabilities: A Global Threat to Critical Infrastructure

Do Son September 26, 2024 0

Stay informed about the Flax Typhoon botnet cyberattack campaign and how it poses a significant risk to global critical infrastructure.

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-20320CVSS 7.5
    A vulnerability in the Open Client Interface (OCI) XML Parser of Cisco BroadWorks could allow an unauthenticated, remote...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-111793CVSS 4.3
    Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted....
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-111560CVSS 8.6
    Improper neutralization of shell metacharacters in the timezone configuration field in certain Barracuda appliance products using common Barracuda...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-116606CVSS 9.3
    An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-125350
    Use after free in XML. Reported by anonymous on 2026-11-06. Google is aware that an exploit for CVE-2026-125350...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-124194CVSS 6.5
    Product ui does not warn user of unsafe actions in Microsoft Office Outlook allows an unauthorized attacker to...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-123751CVSS 9.8
    The WP Duplicate WordPress plugin through 1.1.11 does not properly verify a request authentication value and does not...
    Watchtower Verified📅 Updated: Nov 9, 2026
  • CVE-2026-114713CVSS 8.6
    The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing...
    Admin intel📅 Updated: Nov 9, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-126542CVSS 9.3
    WWBN AVideo 6.5 through 29.7.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to log in as...
    📅 Updated: Nov 11, 2026
  • CVE-2026-126539CVSS 9.2
    Directus before 12.1.0 contains an authorization bypass vulnerability that allows unauthenticated attackers to skip permission checks by sending...
    📅 Updated: Nov 11, 2026
  • CVE-2026-114160CVSS 9.8
    Server-side request forgery (ssrf) in Azure Managed Grafana allows an unauthorized attacker to elevate privileges over a network.
    📅 Updated: Nov 11, 2026
  • CVE-2026-126259CVSS 9.0
    Missing authentication for critical function in FortiOS
    📅 Updated: Nov 10, 2026
  • CVE-2026-126262CVSS 9.3
    Improper neutralization of special elements used in an SQL command in FortiManager
    📅 Updated: Nov 10, 2026
  • CVE-2026-126260CVSS 9.0
    Server side request forgery vulnerability in FortiAnalyzer, FortiManager with FortiAnalyzer features & FortiAnalyzer-BigData
    📅 Updated: Nov 10, 2026
  • CVE-2026-126170CVSS 9.8
    Unauthenticated RCE in multiple products
    📅 Updated: Nov 10, 2026
  • CVE-2026-126261CVSS 9.0
    Improper authorizatin vulnerability in FortiManager
    📅 Updated: Nov 10, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.