Skip to content
November 11, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
Light/Dark Button
Critical Flaws Found in VICIdial Contact Center Suite: CVE-2024-8503 and CVE-2024-8504, PoC Published CVE-2024-8503 & CVE-2024-8504 - VICIdial
  • Vulnerability

Critical Flaws Found in VICIdial Contact Center Suite: CVE-2024-8503 and CVE-2024-8504, PoC Published

Do Son September 16, 2024 0

Secure your VICIdial system: Learn about the serious security risks posed by CVE-2024-8503 (CVSS 9.8) & CVE-2024-8504 (CVSS 8.8)

Exploit Kits, Cryptominers, Proxyjackers: The New Face of Selenium Grid Abuse proxyjacking
  • Malware

Exploit Kits, Cryptominers, Proxyjackers: The New Face of Selenium Grid Abuse

Do Son September 16, 2024 0

Uncover the dangers of proxyjacking through misconfigured instances of Selenium Grid. Learn how cybercriminals exploit vulnerabilities to deploy malicious campaigns.

Hadooken Malware: A New Threat to WebLogic Servers Entire
  • Malware

Hadooken Malware: A New Threat to WebLogic Servers

Do Son September 16, 2024 0

Discover the dangers of Hadooken, a new Linux malware targeting Oracle WebLogic servers. Find out how it spreads and the risks it poses to critical applications.

Multiple Critical Vulnerabilities Found in D-Link WiFi Routers: Immediate Firmware Updates Advised CVE-2024-45694 & CVE-2024-45695 & CVE-2024-45694
  • Vulnerability

Multiple Critical Vulnerabilities Found in D-Link WiFi Routers: Immediate Firmware Updates Advised

Do Son September 16, 2024 0

D-Link router users, beware of multiple vulnerabilities! Take action now to prevent unauthorized access to your devices.

Kawasaki Europe Navigates Ransomware Incident, Recovery in Progress Kawasaki Motors Europe
  • Cyber Security
  • Malware

Kawasaki Europe Navigates Ransomware Incident, Recovery in Progress

Do Son September 16, 2024 0

Kawasaki Motors Europe is recovering from a cyberattack. Learn about the company's security response and progress in restoring services after the incident.

New Zero-Day Emerges After Microsoft Patch Tuesday: CVE-2024-43461 Targets Windows MSHTML CVE-2024-43461
  • Vulnerability

New Zero-Day Emerges After Microsoft Patch Tuesday: CVE-2024-43461 Targets Windows MSHTML

Do Son September 15, 2024 0

Learn about CVE-2024-43461, a newly discovered zero-day vulnerability impacting the Windows MSHTML Platform and posing a significant security risk.

CVE-2024-38816: Spring Framework Path Traversal Vulnerability Threatens Millions CVE-2024-38816
  • Vulnerability

CVE-2024-38816: Spring Framework Path Traversal Vulnerability Threatens Millions

Do Son September 15, 2024 0

Stay informed about the serious security vulnerability (CVE-2024-38816) in the Spring Framework. Learn how it can potentially affect millions of Java applications worldwide.

PoC Exploit Released for Ivanti EPM Flaw CVE-2024-29847 (CVSS 10) CVE-2024-29847 PoC exploit Github
  • Vulnerability

PoC Exploit Released for Ivanti EPM Flaw CVE-2024-29847 (CVSS 10)

Do Son September 15, 2024 0

Discover the technical details and PoC exploit code for the critical CVE-2024-29847 vulnerability in Ivanti Endpoint Management software.

Ajina.Banker: Unmasking the Android Malware Targeting Central Asian Banks Ajina malware
  • Malware

Ajina.Banker: Unmasking the Android Malware Targeting Central Asian Banks

Do Son September 15, 2024 0

Learn about the dangerous Ajina.Banker malware campaign targeting bank customers in Central Asia and beyond. Stay informed and protect your personal and financial data.

Don’t Fall for the Bait: Poseidon Stealer Masquerades as Sopha AI Poseidon Stealer
  • Malware

Don’t Fall for the Bait: Poseidon Stealer Masquerades as Sopha AI

Do Son September 15, 2024 0

Beware of the Poseidon Stealer malware targeting macOS users. Discover how this sophisticated attack exploits the interest in artificial intelligence.

Critical Flaw in NixOS Package Manager: CVE-2024-45593 Allows Arbitrary File Write with Root Permissions Nix Sandbox Escape Root Escalation CVE-2024-45593
  • Vulnerability

Critical Flaw in NixOS Package Manager: CVE-2024-45593 Allows Arbitrary File Write with Root Permissions

Do Son September 15, 2024 0

Learn about the significant security vulnerability in Nix: CVE-2024-45593. Find out how this flaw could be exploited and the potential risks to your system.

Iranian Cyberespionage Campaign Targets Iraqi Government APT34
  • Cyber Security
  • Malware

Iranian Cyberespionage Campaign Targets Iraqi Government

Do Son September 15, 2024 0

Discover the latest cyberespionage campaign targeting the Iraqi government, attributed to the APT34 group and featuring custom-built tools.

BadIIS Malware : 35+ IIS Servers Compromised in DragonRank Campaign DragonRank - BadIIS malware
  • Cyber Security
  • Malware

BadIIS Malware : 35+ IIS Servers Compromised in DragonRank Campaign

Do Son September 15, 2024 0

Learn about DragonRank, a Chinese threat actor specializing in SEO manipulation and cyberattacks. Find out how this group compromises websites and manipulates search engine rankings.

Medusa Exploits Fortinet Flaw (CVE-2023-48788) for Stealthy Ransomware Attacks Medusa Ransomware group
  • Malware

Medusa Exploits Fortinet Flaw (CVE-2023-48788) for Stealthy Ransomware Attacks

Do Son September 14, 2024 0

Discover the unique tactics of the Medusa Ransomware group. From their name-and-shame blog to their multi-platform presence, learn how they operate.

20+ Victims and Counting: Lynx Ransomware’s Swift Rise Lynx Ransomware
  • Malware

20+ Victims and Counting: Lynx Ransomware’s Swift Rise

Do Son September 14, 2024 0

Explore the emergence of the Lynx ransomware group and their unconventional tactics. Uncover the motives behind their 'ethical' victim selection.

Beware Mac Users: Fake AppleCare+ Support Scam Lures Victims via GitHub Repos AppleCare+ support
  • Cyber Security

Beware Mac Users: Fake AppleCare+ Support Scam Lures Victims via GitHub Repos

Do Son September 13, 2024 0

Beware of a new AppleCare+ support scam targeting Mac users. Learn how scammers are using Google ads and fake pages to deceive victims.

CISA & Ivanti Warn of Active Exploitation Cloud Services Appliance Flaw CVE-2024-8190 Ivanti EPM Vulnerability CVE-2026-1603 Ivanti EPM Critical XSS, Unauthenticated File Write CVE-2024-29847 & CVE-2024-8190 Ivanti ITSM, Authentication Bypass
  • Vulnerability

CISA & Ivanti Warn of Active Exploitation Cloud Services Appliance Flaw CVE-2024-8190

Do Son September 13, 2024 0

Learn about the critical vulnerability (CVE-2024-8190) in Ivanti CSA that could lead to remote code execution and system compromise.

RansomHub Adopts New Tactics in Latest Attack, Bypasses EDR and Harvests Credentials RansomHub ransomware group - TDSSKiller
  • Cyber Security
  • Malware

RansomHub Adopts New Tactics in Latest Attack, Bypasses EDR and Harvests Credentials

Do Son September 13, 2024 0

Uncover the new attack tactics of the RansomHub ransomware group. Find out how they exploit TDSSKiller and LaZagne to blind security teams and harvest valuable credentials.

Rockwell Automation Products Face Critical Security Risks, Urgent Patching Required CVE-2024-45823 and CVE-2024-45824
  • Vulnerability

Rockwell Automation Products Face Critical Security Risks, Urgent Patching Required

Do Son September 13, 2024 0

Discover the serious vulnerabilities found in Rockwell Automation's FactoryTalk software. Learn how CVE-2024-45823 and CVE-2024-45824 could allow unauthorized access and remote code execution.

CVE-2024-45186: FileSender Vulnerability Poses Risk to User Credentials, Immediate Action Required FileSender-logo-black-3509x2481px
  • Vulnerability

CVE-2024-45186: FileSender Vulnerability Poses Risk to User Credentials, Immediate Action Required

Do Son September 13, 2024 0

Discover the server-side template injection vulnerability in FileSender, CVE-2024-45186, and how it allows unauthorized access to critical credentials.

Citrix Workspace App Users Urged to Update Following Two Privilege Escalation Flaws CVE-2024-7889
  • Vulnerability

Citrix Workspace App Users Urged to Update Following Two Privilege Escalation Flaws

Do Son September 13, 2024 0

Learn about the critical vulnerabilities (CVE-2024-7889 and CVE-2024-7890) in Citrix Workspace app for Windows, which could lead to system compromise.

Wayback Machine Integration: Google Search Makes Digital History Accessible Google Search Internet Archive
  • Technology

Wayback Machine Integration: Google Search Makes Digital History Accessible

Do Son September 13, 2024 0

Learn how the Internet Archive and Google Search collaborate to provide access to historical web pages and serve as a substitute for the removed cache feature.

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-20320CVSS 7.5
    A vulnerability in the Open Client Interface (OCI) XML Parser of Cisco BroadWorks could allow an unauthenticated, remote...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-111793CVSS 4.3
    Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted....
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-111560CVSS 8.6
    Improper neutralization of shell metacharacters in the timezone configuration field in certain Barracuda appliance products using common Barracuda...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-116606CVSS 9.3
    An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-125350
    Use after free in XML. Reported by anonymous on 2026-11-06. Google is aware that an exploit for CVE-2026-125350...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-124194CVSS 6.5
    Product ui does not warn user of unsafe actions in Microsoft Office Outlook allows an unauthorized attacker to...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-123751CVSS 9.8
    The WP Duplicate WordPress plugin through 1.1.11 does not properly verify a request authentication value and does not...
    Watchtower Verified📅 Updated: Nov 9, 2026
  • CVE-2026-114713CVSS 8.6
    The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing...
    Admin intel📅 Updated: Nov 9, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-126542CVSS 9.3
    WWBN AVideo 6.5 through 29.7.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to log in as...
    📅 Updated: Nov 11, 2026
  • CVE-2026-126539CVSS 9.2
    Directus before 12.1.0 contains an authorization bypass vulnerability that allows unauthenticated attackers to skip permission checks by sending...
    📅 Updated: Nov 11, 2026
  • CVE-2026-114160CVSS 9.8
    Server-side request forgery (ssrf) in Azure Managed Grafana allows an unauthorized attacker to elevate privileges over a network.
    📅 Updated: Nov 11, 2026
  • CVE-2026-126259CVSS 9.0
    Missing authentication for critical function in FortiOS
    📅 Updated: Nov 10, 2026
  • CVE-2026-126262CVSS 9.3
    Improper neutralization of special elements used in an SQL command in FortiManager
    📅 Updated: Nov 10, 2026
  • CVE-2026-126260CVSS 9.0
    Server side request forgery vulnerability in FortiAnalyzer, FortiManager with FortiAnalyzer features & FortiAnalyzer-BigData
    📅 Updated: Nov 10, 2026
  • CVE-2026-126170CVSS 9.8
    Unauthenticated RCE in multiple products
    📅 Updated: Nov 10, 2026
  • CVE-2026-126261CVSS 9.0
    Improper authorizatin vulnerability in FortiManager
    📅 Updated: Nov 10, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.