Skip to content
October 18, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
HTTP/2 Rapid Reset Attack: HTTP/2 Zero-Day Vulnerability Rocks Cybersecurity World HTTP/2 Rapid Reset
  • Vulnerability

HTTP/2 Rapid Reset Attack: HTTP/2 Zero-Day Vulnerability Rocks Cybersecurity World

Do Son October 10, 2023 0
Today, a new cyber threat has shaken the very foundations of the digital world. Leading internet giants,...
Read More Read more about HTTP/2 Rapid Reset Attack: HTTP/2 Zero-Day Vulnerability Rocks Cybersecurity World
VLC media player received patches for zero-day in open-source library VLC vulnerability
  • Vulnerability

VLC media player received patches for zero-day in open-source library

Do Son October 10, 2023 0
VLC media player is a popular open-source media player that is used by millions of people around...
Read More Read more about VLC media player received patches for zero-day in open-source library
From Badbox to Peachpit Malware: Unraveling Android’s Multi-Million Dollar Scam Badbox malware
  • Malware

From Badbox to Peachpit Malware: Unraveling Android’s Multi-Million Dollar Scam

Do Son October 10, 2023 0
In January, cyber-security researcher Daniel Milisic uncovered a low-cost Chinese-made Android streaming box named T95, which, upon...
Read More Read more about From Badbox to Peachpit Malware: Unraveling Android’s Multi-Million Dollar Scam
Is Your Phone Compromised? Signs of Stealthy Malware Infection Malware Infection
  • Malware

Is Your Phone Compromised? Signs of Stealthy Malware Infection

Do Son October 10, 2023 0
Unusual overheating of a smartphone, spontaneous installation of unfamiliar apps, or a sudden spike in data usage...
Read More Read more about Is Your Phone Compromised? Signs of Stealthy Malware Infection
Operation Zero’s Astounding Bounty Boost: $200K to $20M! Operation Zero Bounty
  • News

Operation Zero’s Astounding Bounty Boost: $200K to $20M!

Do Son October 9, 2023 0
Recently, the security insider reported that a company specializing in procuring and vending zero-day vulnerabilities has proffered...
Read More Read more about Operation Zero’s Astounding Bounty Boost: $200K to $20M!
Americans have lost more than $2.7 billion to social media scams since 2021 social media scams
  • News

Americans have lost more than $2.7 billion to social media scams since 2021

Do Son October 9, 2023 0
Recently, the U.S. Federal Trade Commission (FTC) disclosed investigative findings, revealing that since 2021, Americans have suffered...
Read More Read more about Americans have lost more than $2.7 billion to social media scams since 2021
Exim Vulnerability CVE-2023-42118 Affects Sophos Firewall and SG UTM Customers Sophos Firewall Exim Vulnerability
  • Vulnerability

Exim Vulnerability CVE-2023-42118 Affects Sophos Firewall and SG UTM Customers

Do Son October 9, 2023 0
A critical vulnerability has been discovered in the Exim mailer software, which is widely used in Sophos...
Read More Read more about Exim Vulnerability CVE-2023-42118 Affects Sophos Firewall and SG UTM Customers
NSA to set up Artificial Intelligence Security Center Artificial Intelligence Security Center
  • News

NSA to set up Artificial Intelligence Security Center

Do Son October 9, 2023 0
Recently, the Commander of the U.S. Cyber Command and Director of the National Security Agency, Army Gen....
Read More Read more about NSA to set up Artificial Intelligence Security Center
CISA reveals the top ten most common cybersecurity misconfigurations cybersecurity misconfigurations
  • Vulnerability

CISA reveals the top ten most common cybersecurity misconfigurations

Do Son October 9, 2023 0
Recently, the Cybersecurity and Infrastructure Security Agency (CISA) in collaboration with the National Security Agency (NSA) unveiled...
Read More Read more about CISA reveals the top ten most common cybersecurity misconfigurations
Unmasking Meltdown: Alarming CPU Flaws Revealed Meltdown CPU Flaws
  • Vulnerability

Unmasking Meltdown: Alarming CPU Flaws Revealed

Do Son October 8, 2023 0
In an age where computer security is of paramount importance, few vulnerabilities have sent ripples through the...
Read More Read more about Unmasking Meltdown: Alarming CPU Flaws Revealed
Two critical Microsoft PC Manager bugs let an attacker launch a supply-chain attack Microsoft PC Manager vulnerabilities
  • Vulnerability

Two critical Microsoft PC Manager bugs let an attacker launch a supply-chain attack

Do Son October 8, 2023 0
Two critical security vulnerabilities have recently been discovered in Microsoft PC Manager, which could allow a remote...
Read More Read more about Two critical Microsoft PC Manager bugs let an attacker launch a supply-chain attack
NeuVector CVE-2023-32188: A Critical Bug That Can Allow RCE CVE-2023-32188
  • Vulnerability

NeuVector CVE-2023-32188: A Critical Bug That Can Allow RCE

Do Son October 7, 2023 0
In the vast world of container security, NeuVector, developed and maintained by SUSE, stands tall as a...
Read More Read more about NeuVector CVE-2023-32188: A Critical Bug That Can Allow RCE
East Asia’s Semiconductor Industry Targeted in New Espionage Campaign Espionage Campaign
  • Cyber Security
  • Malware

East Asia’s Semiconductor Industry Targeted in New Espionage Campaign

Do Son October 6, 2023 0
In a comprehensive investigation, analysts at EclecticIQ have unearthed a sophisticated cyber-espionage operation aimed at Mandarin/Chinese-speaking East...
Read More Read more about East Asia’s Semiconductor Industry Targeted in New Espionage Campaign
Sony confirms two major data breaches this year Sony data breaches
  • Data Leak

Sony confirms two major data breaches this year

Do Son October 6, 2023 0
Sony confirmed earlier this year that it suffered two significant data breaches, potentially leading to a vast...
Read More Read more about Sony confirms two major data breaches this year
Three Newly Added KEV Vulnerabilities: What You Need to Know CISA KEV Update, Cisco Zero-Day KEV Vulnerabilities
  • Vulnerability

Three Newly Added KEV Vulnerabilities: What You Need to Know

Do Son October 6, 2023 0
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added three new security vulnerabilities to its Known...
Read More Read more about Three Newly Added KEV Vulnerabilities: What You Need to Know
Why do banks need overnight loans? tech-money
  • Technique

Why do banks need overnight loans?

Do Son October 5, 2023 0
We often face unexpected urgent expenses, or an opportunity arises, such as buying something, studying, or traveling...
Read More Read more about Why do banks need overnight loans?
CVE-2023-38545: “The worst curl security flaw in a long time” CVE-2023-38545 curl summer of bliss curl vulnerability pause, curl summer of bliss, curl 8.22.0 delay, HackerOne submission pause
  • Vulnerability

CVE-2023-38545: “The worst curl security flaw in a long time”

Do Son October 5, 2023 0
On October 5, 2023, curl maintainer Daniel Stenberg issued an early alert about two security flaws in...
Read More Read more about CVE-2023-38545: “The worst curl security flaw in a long time”
Technical Details Released for XSS to RCE Vulnerability in Microsoft Office Screenshot 2023-10-05 155736
  • Vulnerability

Technical Details Released for XSS to RCE Vulnerability in Microsoft Office

Do Son October 5, 2023 0
A new and dangerous cross-site scripting (XSS) vulnerability has been discovered in Microsoft Office, affecting hundreds of...
Read More Read more about Technical Details Released for XSS to RCE Vulnerability in Microsoft Office
Microsoft Defender no longer considered Tor Browser as a trojan Microsoft Defender Tor Browser
  • Malware

Microsoft Defender no longer considered Tor Browser as a trojan

Do Son October 5, 2023 0
Microsoft Defender’s false positives are evident to all. Previously, it mistakenly identified Google Chrome as a virus...
Read More Read more about Microsoft Defender no longer considered Tor Browser as a trojan
Russia plans to block all VPN services in Russia from March 1, 2024 Russia block VPN
  • Technology

Russia plans to block all VPN services in Russia from March 1, 2024

Do Son October 5, 2023 0
According to a report by Russia’s Sputnik News Agency, the Russian Federal Communications Commission (RKN) intends to...
Read More Read more about Russia plans to block all VPN services in Russia from March 1, 2024
CVE-2023-39191: High Linux Kernel eBPF Vulnerability Disclosure CVE-2023-39191
  • Vulnerability

CVE-2023-39191: High Linux Kernel eBPF Vulnerability Disclosure

Do Son October 4, 2023 0
A critical security vulnerability has been discovered in the Linux kernel eBPF subsystem that could allow an...
Read More Read more about CVE-2023-39191: High Linux Kernel eBPF Vulnerability Disclosure
Two Critical Security Vulnerabilities Actively Exploited, CISA Warns CISA KEV Update, Cisco Zero-Day KEV Vulnerabilities
  • Vulnerability

Two Critical Security Vulnerabilities Actively Exploited, CISA Warns

Do Son October 4, 2023 0
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two recently patched security vulnerabilities to its...
Read More Read more about Two Critical Security Vulnerabilities Actively Exploited, CISA Warns
❮ Prev Page
Next Page ❯

Search

Translation

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2020-13125CVSS 7.2
    An issue was discovered in the "Ultimate Addons for Elementor" plugin before 1.24.2 for WordPress, as exploited in...
    Watchtower Verified📅 Updated: Oct 18, 2026
  • CVE-2020-13126CVSS 9.9
    An issue was discovered in the Elementor Pro plugin before 2.9.4 for WordPress, as exploited in the wild...
    Watchtower Verified📅 Updated: Oct 18, 2026
  • CVE-2019-20180CVSS 8.0
    The TablePress plugin for WordPress is vulnerable to CSV Injection in versions up to and including 1.14 via...
    Watchtower Verified📅 Updated: Oct 18, 2026
  • CVE-2026-111862CVSS 9.8
    Rank Math SEO PRO for WordPress is affected by a supply-chain compromise in a subset of version 3.0.123...
    Admin intel📅 Updated: Oct 17, 2026
  • CVE-2026-111357CVSS 7.0
    Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to...
    Watchtower Verified📅 Updated: Oct 17, 2026
  • CVE-2025-61624CVSS 6.0
    An Improper Limitation of a Pathname to a Restricted Directory (\'Path Traversal\') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0...
    CISA KEV📅 Added to KEV: Oct 16, 2026
  • CVE-2026-102764CVSS 9.3
    The vulnerability exists within internal components of BeyondTrust’s Remote Support product. The components did not adequately validate the...
    CISA KEV📅 Added to KEV: Oct 16, 2026
  • CVE-2026-106931CVSS 8.5
    SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS...
    Admin intel📅 Updated: Oct 15, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-16337CVSS 9.4
    Improper authorization in the ToolGroupResource and RoleAjax REST/DWR endpoints in dotCMS dotCMS 21.02 through 26.06.22-03 on all platforms...
    📅 Updated: Oct 18, 2026
  • CVE-2026-111911CVSS 9.3
    phpMyFAQ 4.0.0 before 4.1.9 contains an authentication bypass vulnerability where WebAuthn registration endpoints attach credentials to any account...
    📅 Updated: Oct 17, 2026
  • CVE-2026-111862CVSS 9.8
    Rank Math SEO PRO for WordPress is affected by a supply-chain compromise in a subset of version 3.0.123...
    Admin intel📅 Updated: Oct 17, 2026
  • CVE-2026-104736CVSS 9.8
    The LearnPress plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 4.4.10...
    📅 Updated: Oct 17, 2026
  • CVE-2026-101950CVSS 9.3
    A Heap-based Buffer Overflow vulnerability in the SVR component of Juniper Networks Junos OS on SRX Series allows...
    📅 Updated: Oct 17, 2026
  • CVE-2026-110653CVSS 9.1
    The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to...
    📅 Updated: Oct 17, 2026
  • CVE-2026-97381CVSS 9.9
    Legacy Update is a tool for activating and installing updates on legacy Windows PCs. Legacy Update 1.12.0 through...
    📅 Updated: Oct 17, 2026
  • CVE-2026-93895CVSS 9.1
    IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow an unauthenticated remote attacker to bypass access...
    📅 Updated: Oct 17, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.