Skip to content
October 20, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
Former Uber chief security officer gets three-year probation for covering up data breach Uber data breach
  • Data Leak

Former Uber chief security officer gets three-year probation for covering up data breach

Do Son May 7, 2023 0
Last Thursday, Uber’s former Chief Security Officer, Joe Sullivan, was sentenced to three years of probation. Previously,...
Read More Read more about Former Uber chief security officer gets three-year probation for covering up data breach
Facebook emphasized the surge in malware masquerading as ChatGPT malware ChatGPT
  • Malware

Facebook emphasized the surge in malware masquerading as ChatGPT

Do Son May 7, 2023 0
On May 3rd, social media titan Facebook’s security team released a Q1 quarterly security report, detailing their...
Read More Read more about Facebook emphasized the surge in malware masquerading as ChatGPT
Researcher releases PoC exploit for Parallels Desktop privilege escalation (CVE-2023-27326) flaw CVE-2023-27326 PoC
  • Vulnerability

Researcher releases PoC exploit for Parallels Desktop privilege escalation (CVE-2023-27326) flaw

Do Son May 6, 2023 0
A proof-of-concept (PoC) exploit for a serious privilege escalation vulnerability in Parallels Desktop has been released by...
Read More Read more about Researcher releases PoC exploit for Parallels Desktop privilege escalation (CVE-2023-27326) flaw
Critical GitLab Security Vulnerability: CVE-2023-2478 Exposes Projects to Malicious Runners CVE-2023-2478
  • Vulnerability

Critical GitLab Security Vulnerability: CVE-2023-2478 Exposes Projects to Malicious Runners

Do Son May 6, 2023 0
GitLab, the popular web-based DevOps lifecycle tool, has recently issued a critical security advisory concerning a significant...
Read More Read more about Critical GitLab Security Vulnerability: CVE-2023-2478 Exposes Projects to Malicious Runners
Intel OEM Private Key Leak: A Blow to UEFI Secure Boot Security Intel OEM Private Key Intel SambaNova Acquisition, AI Chip Startup Valuation
  • Data Leak

Intel OEM Private Key Leak: A Blow to UEFI Secure Boot Security

Do Son May 6, 2023 0
In April, MSI fell victim to a cyberattack perpetrated by the ransomware group Money Message, who successfully...
Read More Read more about Intel OEM Private Key Leak: A Blow to UEFI Secure Boot Security
PoC Exploit Released for Linux Kernel Privilege Escalation (CVE-2023-0386) Bug CVE-2023-0386 PoC Linux Privilege Escalation, OverlayFS
  • Vulnerability

PoC Exploit Released for Linux Kernel Privilege Escalation (CVE-2023-0386) Bug

Do Son May 5, 2023 0
A recently discovered flaw, CVE-2023-0386, with a CVSS score of 7.8, has been identified in the Linux...
Read More Read more about PoC Exploit Released for Linux Kernel Privilege Escalation (CVE-2023-0386) Bug
CVE-2023-30777: XSS Flaw Found in WordPress Plugin With More Than 2 million Installations CVE-2023-30777
  • Vulnerability

CVE-2023-30777: XSS Flaw Found in WordPress Plugin With More Than 2 million Installations

Do Son May 5, 2023 0
The Advanced Custom Fields (ACF) and Advanced Custom Fields Pro plugins, which boast over 2 million active...
Read More Read more about CVE-2023-30777: XSS Flaw Found in WordPress Plugin With More Than 2 million Installations
Fleckpe: A Subscription Trojan Infiltrating Google Play Store Fleckpe Trojan
  • Malware

Fleckpe: A Subscription Trojan Infiltrating Google Play Store

Do Son May 4, 2023 0
Despite stringent security measures, the Google Play Store is not immune to malware attacks. One such recent...
Read More Read more about Fleckpe: A Subscription Trojan Infiltrating Google Play Store
Unveiling the ‘faulTPM’ Exploit: AMD’s Vulnerable Trusted Platform Module AMD faulTPM
  • Vulnerability

Unveiling the ‘faulTPM’ Exploit: AMD’s Vulnerable Trusted Platform Module

Do Son May 3, 2023 0
Microsoft mandated personal computer support for TPM to install Windows 11, provoking controversy upon the operating system’s...
Read More Read more about Unveiling the ‘faulTPM’ Exploit: AMD’s Vulnerable Trusted Platform Module
CVE-2023-20126: A Critical Cisco Vulnerability Threatening SPA112 Phone Adapters CVE-2023-20126
  • Vulnerability

CVE-2023-20126: A Critical Cisco Vulnerability Threatening SPA112 Phone Adapters

Do Son May 3, 2023 0
The world of cybersecurity is continuously evolving, with companies constantly working to patch security vulnerabilities and protect...
Read More Read more about CVE-2023-20126: A Critical Cisco Vulnerability Threatening SPA112 Phone Adapters
MuddyWater APT Exploits MSP Tools to Target Global Victims MuddyWater APT
  • Cyber Security

MuddyWater APT Exploits MSP Tools to Target Global Victims

Do Son May 2, 2023 0
Iran-backed cyberespionage group MuddyWater has launched a new campaign targeting victims worldwide, with a focus on telecommunications,...
Read More Read more about MuddyWater APT Exploits MSP Tools to Target Global Victims
Earth Longzhi’s Cyber Attack: New Techniques Target Asia-Pacific Organizations Earth Longzhi
  • Cyber Security
  • Malware

Earth Longzhi’s Cyber Attack: New Techniques Target Asia-Pacific Organizations

Do Son May 2, 2023 0
Researchers from Trend Micro have uncovered a new campaign by Earth Longzhi, a subgroup of APT41, which...
Read More Read more about Earth Longzhi’s Cyber Attack: New Techniques Target Asia-Pacific Organizations
CVE-2022-46718 iOS Vulnerability Exposes Sensitive Location Data: PoC is available CVE-2022-46718
  • Vulnerability

CVE-2022-46718 iOS Vulnerability Exposes Sensitive Location Data: PoC is available

Do Son May 2, 2023 0
In today’s world, privacy is paramount, especially when it comes to protecting users’ sensitive information on their...
Read More Read more about CVE-2022-46718 iOS Vulnerability Exposes Sensitive Location Data: PoC is available
CVE-2023-30869: Critical Security Vulnerability Found in Popular WordPress Plugin CVE-2023-30869
  • Vulnerability

CVE-2023-30869: Critical Security Vulnerability Found in Popular WordPress Plugin

Do Son May 2, 2023 0
The world of digital e-commerce has experienced rapid growth, with many businesses relying on powerful plugins to...
Read More Read more about CVE-2023-30869: Critical Security Vulnerability Found in Popular WordPress Plugin
CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog CVE-2023-21839
  • Vulnerability

CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog

Do Son May 1, 2023 0
The Cybersecurity and Infrastructure Security Agency (CISA) has identified three emerging security vulnerabilities posing significant risks to...
Read More Read more about CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog
Rapture Revealed: Trend Micro Exposes Cunning New Ransomware Variant Rapture Ransomware
  • Malware

Rapture Revealed: Trend Micro Exposes Cunning New Ransomware Variant

Do Son April 30, 2023 0
In March and April 2023, cybersecurity researchers at Trend Micro uncovered a new ransomware variant, dubbed “Rapture,”...
Read More Read more about Rapture Revealed: Trend Micro Exposes Cunning New Ransomware Variant
MLflow Vulnerability: CVE-2023-2356 Exposes Sensitive Data on Tracking Server CVE-2023-2356
  • Vulnerability

MLflow Vulnerability: CVE-2023-2356 Exposes Sensitive Data on Tracking Server

Do Son April 27, 2023 0
MLflow, a widely-used platform for streamlining machine learning development, recently caught the attention of security researchers due...
Read More Read more about MLflow Vulnerability: CVE-2023-2356 Exposes Sensitive Data on Tracking Server
CVE-2023-30847: High-severity vulnerability in H2O open-source web server software CVE-2023-30847
  • Vulnerability

CVE-2023-30847: High-severity vulnerability in H2O open-source web server software

Do Son April 27, 2023 0
As the digital world continues to evolve at breakneck speeds, developers are in a constant race to...
Read More Read more about CVE-2023-30847: High-severity vulnerability in H2O open-source web server software
ThreatMon Revealed APT41’s Stealthy PowerShell Backdoor APT41's backdoor
  • Cyber Security
  • Malware

ThreatMon Revealed APT41’s Stealthy PowerShell Backdoor

Do Son April 27, 2023 0
APT41, a Chinese cyber espionage group active since 2012, is known for its advanced tactics, techniques, and...
Read More Read more about ThreatMon Revealed APT41’s Stealthy PowerShell Backdoor
CVE-2023-29007: Git Users Beware of Arbitrary Configuration Injection Vulnerability CVE-2023-29007
  • Vulnerability

CVE-2023-29007: Git Users Beware of Arbitrary Configuration Injection Vulnerability

Do Son April 27, 2023 0
Git, the popular version control system, is at the center of a newly identified security vulnerability that...
Read More Read more about CVE-2023-29007: Git Users Beware of Arbitrary Configuration Injection Vulnerability
Beware of Hidden Advertising in Popular Minecraft-Inspired Mobile Games HiddenAds
  • Malware

Beware of Hidden Advertising in Popular Minecraft-Inspired Mobile Games

Do Son April 27, 2023 0
Minecraft, the wildly successful sandbox game developed by Mojang Studios, has inspired a plethora of similar games...
Read More Read more about Beware of Hidden Advertising in Popular Minecraft-Inspired Mobile Games
Sergey Tokarev: Ukrainian Startups Can Get Aid from Tech Circle Screenshot 2023-04-27 151406
  • Technique

Sergey Tokarev: Ukrainian Startups Can Get Aid from Tech Circle

Do Son April 27, 2023 0
Since the full-scale invasion of Russia started, the Ukrainian IT area has experienced the worst times from...
Read More Read more about Sergey Tokarev: Ukrainian Startups Can Get Aid from Tech Circle
❮ Prev Page
Next Page ❯

Search

Translation

CVE ALERTS
πŸ“ˆ

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

πŸ›‘οΈ

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

πŸ™

GitHub Issues
Auto-create alert tickets without duplication.

πŸ“¬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

πŸ”€

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days β†’

🚨 Active Exploits in the Wild

  • CVE-2020-13125CVSS 7.2
    An issue was discovered in the "Ultimate Addons for Elementor" plugin before 1.24.2 for WordPress, as exploited in...
    Watchtower Verified📅 Updated: Oct 20, 2026
  • CVE-2020-13126CVSS 9.9
    An issue was discovered in the Elementor Pro plugin before 2.9.4 for WordPress, as exploited in the wild...
    Watchtower Verified📅 Updated: Oct 20, 2026
  • CVE-2019-20180CVSS 8.0
    The TablePress plugin for WordPress is vulnerable to CSV Injection in versions up to and including 1.14 via...
    Watchtower Verified📅 Updated: Oct 20, 2026
  • CVE-2026-66373CVSS 7.5
    Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE, allows remote code execution...
    Admin intel📅 Updated: Oct 20, 2026
  • CVE-2026-110936CVSS 8.4
    A vulnerability has been identified in Siemens Software Center (All versions < V4.0.9.8). The affected application loads dynamic-link...
    Admin intel📅 Updated: Oct 20, 2026
  • CVE-2026-111862CVSS 9.8
    Rank Math SEO PRO for WordPress is affected by a supply-chain compromise in a subset of version 3.0.123...
    Admin intel📅 Updated: Oct 17, 2026
  • CVE-2026-111357CVSS 7.0
    Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to...
    Watchtower Verified📅 Updated: Oct 17, 2026
  • CVE-2025-61624CVSS 6.0
    An Improper Limitation of a Pathname to a Restricted Directory (\'Path Traversal\') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0...
    CISA KEV📅 Added to KEV: Oct 16, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-78162CVSS 10.0
    Deserialization of Untrusted Data vulnerability in Apache Camel. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from...
    📅 Updated: Oct 20, 2026
  • CVE-2026-47168CVSS 9.1
    EspoCRM is an open source customer relationship management application. Prior to 9.3.7, an authenticated administrator can supply crafted...
    📅 Updated: Oct 20, 2026
  • CVE-2026-104586CVSS 9.8
    AUTOM8N (WHM/cPanel plugin) through commit 82821f7 contains an OS Command Injection in borg_restore.cgi.
    📅 Updated: Oct 20, 2026
  • CVE-2026-110957CVSS 10.0
    A vulnerability has been found in Wavlink WL-WN530BE2-A up to M30BE2_V250604. The affected element is the function sub_12580...
    📅 Updated: Oct 20, 2026
  • CVE-2026-77524CVSS 9.9
    KEDA is a Kubernetes-based Event Driven Autoscaling component. In version 2.20.2 and earlier, a namespace administrator who can...
    📅 Updated: Oct 20, 2026
  • CVE-2026-110646CVSS 9.2
    Beganovich snappdf from 1.1.0 before 6.1.0 contains an OS command injection vulnerability on Windows that allows attackers to...
    📅 Updated: Oct 20, 2026
  • CVE-2026-110636CVSS 9.3
    pypdftk through 0.5 contains an OS command injection vulnerability in fill_form(), dump_data_fields(), and pdftk_cmd_util() that builds shell commands...
    📅 Updated: Oct 20, 2026
  • CVE-2026-110631CVSS 9.3
    Komodo through 2.3.3 contains an authentication bypass vulnerability in the Periphery agent that allows unauthenticated attackers to connect...
    📅 Updated: Oct 20, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
Β© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.