Skip to content
October 20, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
IZ1H9: The New Face of Mirai Botnet Threatening Linux Servers IZ1H9 botnet
  • Malware
  • Vulnerability

IZ1H9: The New Face of Mirai Botnet Threatening Linux Servers

Do Son May 25, 2023 0
A concerning variant of the Mirai botnet, IZ1H9, is infiltrating Linux servers and network devices with new...
Read More Read more about IZ1H9: The New Face of Mirai Botnet Threatening Linux Servers
From Espionage to Theft: The Multi-Faceted APT Attacks on SMBs APT Attacks SMBs
  • Cyber Security

From Espionage to Theft: The Multi-Faceted APT Attacks on SMBs

Do Son May 25, 2023 0
In the realm of cyber threats, a concerning trend has been recognized by Proofpoint researchers: advanced persistent...
Read More Read more about From Espionage to Theft: The Multi-Faceted APT Attacks on SMBs
Hackers are exploiting CVE-2023-2732 vulnerability in WordPress MStore API plugin Screenshot 2023-05-25 001910
  • Vulnerability

Hackers are exploiting CVE-2023-2732 vulnerability in WordPress MStore API plugin

Do Son May 24, 2023 0
An authentication bypass vulnerability has been found in the MStore API WordPress plugin. Identified as CVE-2023-2732 and...
Read More Read more about Hackers are exploiting CVE-2023-2732 vulnerability in WordPress MStore API plugin
CVE-2023-33009, CVE-2023-33010: Critical Zyxel Firewall Vulnerabilities CVE-2023-33009 & CVE-2024-8748 - CVE-2024-9200
  • Vulnerability

CVE-2023-33009, CVE-2023-33010: Critical Zyxel Firewall Vulnerabilities

Do Son May 24, 2023 0
As digital fortresses grow more formidable, so too does the ingenuity of the assailants. The cyber-world recently...
Read More Read more about CVE-2023-33009, CVE-2023-33010: Critical Zyxel Firewall Vulnerabilities
The core technology of Samsung Electronics was leaked Samsung Electronics leak
  • Data Leak

The core technology of Samsung Electronics was leaked

Do Son May 24, 2023 0
According to international reports, Samsung Electronics’ Device Solutions (DS) division recently discharged an engineer accused of divulging...
Read More Read more about The core technology of Samsung Electronics was leaked
ESET researchers discover AhRat in the trojanized iRecorder app with over 50,000 installations from the Google Play store AhRat iRecorder
  • Malware

ESET researchers discover AhRat in the trojanized iRecorder app with over 50,000 installations from the Google Play store

Do Son May 24, 2023 0
ESET researchers have recently unearthed an Android app that harbors a Trojan horse within its coding. The...
Read More Read more about ESET researchers discover AhRat in the trojanized iRecorder app with over 50,000 installations from the Google Play store
CVE-2023-2825: Critical bug in GitLab with CVSS score of 10 CVE-2023-2825
  • Vulnerability

CVE-2023-2825: Critical bug in GitLab with CVSS score of 10

Do Son May 23, 2023 0
GitLab, the highly popular web-based DevOps lifecycle tool that provides a Git-repository manager has just issued an...
Read More Read more about CVE-2023-2825: Critical bug in GitLab with CVSS score of 10
CVE-2023-32692: CodeIgniter4 Remote Code Execution Vulnerability CodeIgniter vulnerability, arbitrary code execution, CVE-2026-48062, CVE-2024-47823 CVE-2023-32692 CodeIgniter RCE, ImageMagick Vulnerability
  • Vulnerability

CVE-2023-32692: CodeIgniter4 Remote Code Execution Vulnerability

Do Son May 23, 2023 0
In the vast digital landscape that shapes our modern era, PHP, as a server-side scripting language, has...
Read More Read more about CVE-2023-32692: CodeIgniter4 Remote Code Execution Vulnerability
CVE-2023-33246: Apache RocketMQ Remote Code Execution Vulnerability CVE-2023-33246
  • Vulnerability

CVE-2023-33246: Apache RocketMQ Remote Code Execution Vulnerability

Do Son May 23, 2023 0
Apache RocketMQ, renowned for its distributed messaging and streaming capabilities, has recently come under scrutiny due to...
Read More Read more about CVE-2023-33246: Apache RocketMQ Remote Code Execution Vulnerability
Google launches a bug bounty program for its Android apps, with a maximum reward of $30,000 Android apps bug bounty program
  • Technology
  • Vulnerability

Google launches a bug bounty program for its Android apps, with a maximum reward of $30,000

Do Son May 23, 2023 0
Mid-month, Google augmented its Android Vulnerability Rewards Program and has now declared the initiation of a novel...
Read More Read more about Google launches a bug bounty program for its Android apps, with a maximum reward of $30,000
Apache HTTP Server Request Splitting (CVE-2023-25690) Flaw Gets Public PoC Exploit CVE-2023-25690 PoC
  • Vulnerability

Apache HTTP Server Request Splitting (CVE-2023-25690) Flaw Gets Public PoC Exploit

Do Son May 22, 2023 0
In an era where digital security is paramount, vigilance is our watchword. A recent vulnerability uncovered in...
Read More Read more about Apache HTTP Server Request Splitting (CVE-2023-25690) Flaw Gets Public PoC Exploit
CVE-2023-31457 & CVE-2023-32748: Critical Mitel MiVoice Connect Security Vulnerabilities CVE-2023-31457
  • Vulnerability

CVE-2023-31457 & CVE-2023-32748: Critical Mitel MiVoice Connect Security Vulnerabilities

Do Son May 19, 2023 0
Mitel’s MiVoice Connect is renowned for bringing together all communications and collaboration tools into a user-friendly interface....
Read More Read more about CVE-2023-31457 & CVE-2023-32748: Critical Mitel MiVoice Connect Security Vulnerabilities
CVE-2023-32960: CSRF Flaw in WordPress UpdraftPlus Plugin with three million active installations CVE-2023-32960
  • Vulnerability

CVE-2023-32960: CSRF Flaw in WordPress UpdraftPlus Plugin with three million active installations

Do Son May 19, 2023 0
In a recent turn of events, Rafie Muhammad from Patchstack stumbled upon a critical vulnerability CVE-2023-32960 (with...
Read More Read more about CVE-2023-32960: CSRF Flaw in WordPress UpdraftPlus Plugin with three million active installations
PoC Exploit Released for Critical Microsoft Message Queuing RCE (CVE-2023-21554) Bug CVE-2023-21554 PoC
  • Vulnerability

PoC Exploit Released for Critical Microsoft Message Queuing RCE (CVE-2023-21554) Bug

Do Son May 19, 2023 0
Microsoft’s venerated Message Queuing serviceβ€”MSMQ, an integral part of its Windows operating system, has been found to...
Read More Read more about PoC Exploit Released for Critical Microsoft Message Queuing RCE (CVE-2023-21554) Bug
10 Million Dollar Bounty: The Hunt for Ransomware Kingpin Mikhail Matveev Mikhail Matveev Ransomware
  • Cyber Security
  • Malware

10 Million Dollar Bounty: The Hunt for Ransomware Kingpin Mikhail Matveev

Do Son May 19, 2023 0
In a decree promulgated by the Office of Foreign Assets Control (OFAC), a branch of the U.S....
Read More Read more about 10 Million Dollar Bounty: The Hunt for Ransomware Kingpin Mikhail Matveev
ReversingLabs Exposes TurkoRat: A Stealthy Infostealer Infiltrating the npm Platform TurkoRat Infostealer
  • Malware

ReversingLabs Exposes TurkoRat: A Stealthy Infostealer Infiltrating the npm Platform

Do Son May 19, 2023 0
TurkoRat, a pernicious open-source infostealer, was found to have surreptitiously infiltrated the npm platform for two months...
Read More Read more about ReversingLabs Exposes TurkoRat: A Stealthy Infostealer Infiltrating the npm Platform
CVE-2023-20883, CVE-2023-20873: Two High Severity Vulnerabilities in Spring Boot CVE-2023-20883
  • Vulnerability

CVE-2023-20883, CVE-2023-20873: Two High Severity Vulnerabilities in Spring Boot

Do Son May 18, 2023 0
As one of the most sought-after frameworks in Java, Spring Boot’s objective is simple yet vital –...
Read More Read more about CVE-2023-20883, CVE-2023-20873: Two High Severity Vulnerabilities in Spring Boot
CVE-2023-32409, CVE-2023-28204, CVE-2023-32373: Three 0-Day Vulnerabilities in Apple Products CVE-2023-32409
  • Vulnerability

CVE-2023-32409, CVE-2023-28204, CVE-2023-32373: Three 0-Day Vulnerabilities in Apple Products

Do Son May 18, 2023 0
In an unprecedented move, Apple Inc., the tech titan celebrated for its stringent security measures, has recently...
Read More Read more about CVE-2023-32409, CVE-2023-28204, CVE-2023-32373: Three 0-Day Vulnerabilities in Apple Products
What to Consider when Outsourcing IT Support Services tech-js
  • Technique

What to Consider when Outsourcing IT Support Services

Do Son May 18, 2023 0
Cybersecurity breaches, website crashing, and other IT issues can easily end up causing thousands of dollars. This...
Read More Read more about What to Consider when Outsourcing IT Support Services
Critical Security Flaws Uncovered in Cisco Small Business Series Switches CVE-2023-20159
  • Vulnerability

Critical Security Flaws Uncovered in Cisco Small Business Series Switches

Do Son May 18, 2023 0
Multiple critical vulnerabilities have been exposed in a range of Cisco products, potentially paving the way for...
Read More Read more about Critical Security Flaws Uncovered in Cisco Small Business Series Switches
7 tips to secure your marketplace Img_2023_05_18_11_39_50
  • Technique

7 tips to secure your marketplace

Do Son May 17, 2023 0
How to protect your online shop and marketplace   The field of e-commerce is especially demanding in...
Read More Read more about 7 tips to secure your marketplace
Personal information of 237,000 U.S. government employees leaked government employees leaked
  • Data Leak

Personal information of 237,000 U.S. government employees leaked

Do Son May 17, 2023 0
A disconcerting breach of data recently transpired within the confines of the U.S. Department of Transportation (USDOT),...
Read More Read more about Personal information of 237,000 U.S. government employees leaked
❮ Prev Page
Next Page ❯

Search

Translation

CVE ALERTS
πŸ“ˆ

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

πŸ›‘οΈ

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

πŸ™

GitHub Issues
Auto-create alert tickets without duplication.

πŸ“¬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

πŸ”€

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days β†’

🚨 Active Exploits in the Wild

  • CVE-2026-66373CVSS 7.5
    Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE, allows remote code execution...
    Admin intel📅 Updated: Oct 20, 2026
  • CVE-2026-110936CVSS 8.4
    A vulnerability has been identified in Siemens Software Center (All versions < V4.0.9.8). The affected application loads dynamic-link...
    Admin intel📅 Updated: Oct 20, 2026
  • CVE-2020-13125CVSS 7.2
    An issue was discovered in the "Ultimate Addons for Elementor" plugin before 1.24.2 for WordPress, as exploited in...
    Watchtower Verified📅 Updated: Oct 20, 2026
  • CVE-2020-13126CVSS 9.9
    An issue was discovered in the Elementor Pro plugin before 2.9.4 for WordPress, as exploited in the wild...
    Watchtower Verified📅 Updated: Oct 20, 2026
  • CVE-2019-20180CVSS 8.0
    The TablePress plugin for WordPress is vulnerable to CSV Injection in versions up to and including 1.14 via...
    Watchtower Verified📅 Updated: Oct 20, 2026
  • CVE-2026-111862CVSS 9.8
    Rank Math SEO PRO for WordPress is affected by a supply-chain compromise in a subset of version 3.0.123...
    Admin intel📅 Updated: Oct 17, 2026
  • CVE-2026-111357CVSS 7.0
    Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to...
    Watchtower Verified📅 Updated: Oct 17, 2026
  • CVE-2025-61624CVSS 6.0
    An Improper Limitation of a Pathname to a Restricted Directory (\'Path Traversal\') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0...
    CISA KEV📅 Added to KEV: Oct 16, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-110646CVSS 9.2
    Beganovich snappdf from 1.1.0 before 6.1.0 contains an OS command injection vulnerability on Windows that allows attackers to...
    📅 Updated: Oct 20, 2026
  • CVE-2026-110636CVSS 9.3
    pypdftk through 0.5 contains an OS command injection vulnerability in fill_form(), dump_data_fields(), and pdftk_cmd_util() that builds shell commands...
    📅 Updated: Oct 20, 2026
  • CVE-2026-110631CVSS 9.3
    Komodo through 2.3.3 contains an authentication bypass vulnerability in the Periphery agent that allows unauthenticated attackers to connect...
    📅 Updated: Oct 20, 2026
  • CVE-2026-110616CVSS 9.2
    NullHub through 2026.5.29 contains a missing authentication vulnerability that allows unauthenticated attackers to access the /api/* management API...
    📅 Updated: Oct 20, 2026
  • CVE-2026-77936CVSS 9.3
    Letta through 0.16.8 ships a compose.yaml that does not enable LETTA_SERVER_SECURE, so the password middleware is never added...
    📅 Updated: Oct 20, 2026
  • CVE-2026-77933CVSS 9.3
    DB-GPT through 0.8.2 contains a hardcoded credentials vulnerability in its default docker-compose.yml that sets a static MYSQL_ROOT_PASSWORD and...
    📅 Updated: Oct 20, 2026
  • CVE-2026-77932CVSS 9.3
    DB-GPT through 0.8.2 contains an unauthenticated remote code execution vulnerability because the /api/v1/chat/react-agent endpoint relies on a mock...
    📅 Updated: Oct 20, 2026
  • CVE-2026-75128CVSS 9.3
    Langchain-Chatchat through 0.3.1.3 exposes a POST /tools/call API endpoint that invokes any registered tool by name without authentication,...
    📅 Updated: Oct 20, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
Β© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.