Skip to content
October 19, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
Firefox 62 will enable DoH encrypted networking feature by default
  • Technology

Firefox 62 will enable DoH encrypted networking feature by default

Do Son June 2, 2018
The privacy-protected Firefox browser has now begun testing the DoH feature in the nightly build to protect...
Read More Read more about Firefox 62 will enable DoH encrypted networking feature by default
Firefox & Chrome are vulnerable to Side-channel attacking browsers via CSS3 feature
  • Vulnerability

Firefox & Chrome are vulnerable to Side-channel attacking browsers via CSS3 feature

Do Son June 2, 2018
Recently, Ruslan Habalov, a security engineer revealed that there has been a bypass attack in browsers such as...
Read More Read more about Firefox & Chrome are vulnerable to Side-channel attacking browsers via CSS3 feature
Microsoft will Acquire GitHub for $5 Billion or More
  • Technology

Microsoft will Acquire GitHub for $5 Billion or More

Do Son June 2, 2018
For a long time, there have been rumors that Microsoft intends to acquire the popular code hosting...
Read More Read more about Microsoft will Acquire GitHub for $5 Billion or More
GNOME move to GitLab
  • Technology

GNOME move to GitLab

Do Son June 1, 2018
The GNOME Foundation announced that it has completed the migration to GitLab. GNOME discussed the migration to GitLab last year because of the increasingly...
Read More Read more about GNOME move to GitLab
Kromtech Reveals Two Data Breach involving Honda and Universal Music
  • Data Leak

Kromtech Reveals Two Data Breach involving Honda and Universal Music

Do Son June 1, 2018
The Kromtech Security Center disclosed two data breaches on Wednesday (May 30th). The main body of the...
Read More Read more about Kromtech Reveals Two Data Breach involving Honda and Universal Music
Microsoft and Apple co-work on HID Human Interface Standard for Braille Display Braille Display
  • Technology

Microsoft and Apple co-work on HID Human Interface Standard for Braille Display

Do Son June 1, 2018
Both Microsoft and Apple and Google are actively developing technology products for people with disabilities to help...
Read More Read more about Microsoft and Apple co-work on HID Human Interface Standard for Braille Display
CVE-2018-11235: Git Remote Code Execution Vulnerability
  • Vulnerability

CVE-2018-11235: Git Remote Code Execution Vulnerability

Do Son June 1, 2018
Recently, a security researcher found a potential remote code execution vulnerability (CVE-2018-11235) in Git. The vulnerability stems...
Read More Read more about CVE-2018-11235: Git Remote Code Execution Vulnerability
MnuBot Bank Trojans Use Microsoft SQL Server as C&C Server
  • Malware

MnuBot Bank Trojans Use Microsoft SQL Server as C&C Server

Do Son May 31, 2018
The IBM X-Force research team discovered a new banking Trojan based on Delphi, a well-known rapid application...
Read More Read more about MnuBot Bank Trojans Use Microsoft SQL Server as C&C Server
Researcher: Intentional Acoustic Interference causes unusual errors in hard disk Intentional Acoustic Interference
  • Vulnerability

Researcher: Intentional Acoustic Interference causes unusual errors in hard disk

Do Son May 31, 2018
At the 39th IEEE Security/Privacy Symposium, the Michigan and Zhejiang University Security Team published a paper demonstrating...
Read More Read more about Researcher: Intentional Acoustic Interference causes unusual errors in hard disk
Iron Cybercrime Group use HackingTeam tools to spread ransomware
  • Cyber Security
  • Malware

Iron Cybercrime Group use HackingTeam tools to spread ransomware

Do Son May 31, 2018
Intezer, an Israeli cybersecurity company, published a blog post on May 29, 2018, stating that it had...
Read More Read more about Iron Cybercrime Group use HackingTeam tools to spread ransomware
Microsoft Windows JScript component exists Remote Code Execution Vulnerability
  • Vulnerability

Microsoft Windows JScript component exists Remote Code Execution Vulnerability

Do Son May 31, 2018
Recently, Kaslov, a security researcher discovered 0day vulnerability in Windows, which was caused by the JScript component...
Read More Read more about Microsoft Windows JScript component exists Remote Code Execution Vulnerability
Google Chrome 67 gets password-free logins feature
  • Technology

Google Chrome 67 gets password-free logins feature

Do Son May 31, 2018
Google Chrome 67 allows most websites to implement password-free login methods, which means that users no longer...
Read More Read more about Google Chrome 67 gets password-free logins feature
IBM QRadar exists Remote Command Execution Vulnerability ManageEngine strelka
  • Vulnerability

IBM QRadar exists Remote Command Execution Vulnerability

Do Son May 30, 2018
Ribeiro found three security vulnerabilities affecting IBM’s QRadar product, one vulnerability CVE-2018-1418 allows remote and unauthenticated attack Bypass authentication...
Read More Read more about IBM QRadar exists Remote Command Execution Vulnerability
1,000 Routers in Singapore exposed to potential attacks
  • Vulnerability

1,000 Routers in Singapore exposed to potential attacks

Do Son May 30, 2018
Internet of Things Internet security company NewSky Security company disclosed on May 28th that Singapore’s largest telecommunications...
Read More Read more about 1,000 Routers in Singapore exposed to potential attacks
Fedora 26 will reach EOL on June 1
  • Linux

Fedora 26 will reach EOL on June 1

Do Son May 30, 2018
The Fedora project team announced that it will stop supporting Fedora 26 Linux systems on June 1,...
Read More Read more about Fedora 26 will reach EOL on June 1
BackSwap Bank Trojan uses three new technologies to empty bank accounts
  • Malware

BackSwap Bank Trojan uses three new technologies to empty bank accounts

Do Son May 30, 2018
ESET’s security experts recently discovered a new type of banking Trojan, BackSwap Bank Trojan, which uses three...
Read More Read more about BackSwap Bank Trojan uses three new technologies to empty bank accounts
Russian government officially requested Apple to block Telegram
  • Technology

Russian government officially requested Apple to block Telegram

Do Son May 30, 2018
Russia’s Federal Communications Ministry of Communications, Information Technology and Mass Media Supervision Agency Roskomnadzor of Russia’s communications...
Read More Read more about Russian government officially requested Apple to block Telegram
The Cobalt hacker group is still active, although the leader was arrested
  • Cyber Security

The Cobalt hacker group is still active, although the leader was arrested

Do Son May 30, 2018
The Russian security company Group-IB recently discovered that the Cobalt hacking organization, which specializes in a theft of funds...
Read More Read more about The Cobalt hacker group is still active, although the leader was arrested
Blockchain Platform EOS exposed High-Risk Security Vulnerabilities
  • Vulnerability

Blockchain Platform EOS exposed High-Risk Security Vulnerabilities

Do Son May 29, 2018
360 companies announced that Vulcan team discovered a series of the high-risk security flaw in blockchain platform...
Read More Read more about Blockchain Platform EOS exposed High-Risk Security Vulnerabilities
Canadian banks were hacked and nearly 90,000 customer data were stolen
  • Cyber Security

Canadian banks were hacked and nearly 90,000 customer data were stolen

Do Son May 29, 2018
The Bank of Montreal and the Canadian Imperial Bank of Commerce said on Monday that cyber attackers...
Read More Read more about Canadian banks were hacked and nearly 90,000 customer data were stolen
T-Mobile Reveals Vulnerability to Allow Anyone to View Others’ Account Information
  • Data Leak

T-Mobile Reveals Vulnerability to Allow Anyone to View Others’ Account Information

Do Son May 29, 2018
A website of the multinational mobile phone operator T-Mobile has recently been exposed to security flaws, allowing...
Read More Read more about T-Mobile Reveals Vulnerability to Allow Anyone to View Others’ Account Information
Iranian Airport Electronic Display Screened Protest Messages Iranian Airport
  • Cyber Security

Iranian Airport Electronic Display Screened Protest Messages

Do Son May 29, 2018
On Thursday (May 24), the airport in Mashhad, northeastern Iran, was attacked by a group of unidentified...
Read More Read more about Iranian Airport Electronic Display Screened Protest Messages
❮ Prev Page
Next Page ❯

Search

Translation

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2020-13125CVSS 7.2
    An issue was discovered in the "Ultimate Addons for Elementor" plugin before 1.24.2 for WordPress, as exploited in...
    Watchtower Verified📅 Updated: Oct 19, 2026
  • CVE-2020-13126CVSS 9.9
    An issue was discovered in the Elementor Pro plugin before 2.9.4 for WordPress, as exploited in the wild...
    Watchtower Verified📅 Updated: Oct 19, 2026
  • CVE-2019-20180CVSS 8.0
    The TablePress plugin for WordPress is vulnerable to CSV Injection in versions up to and including 1.14 via...
    Watchtower Verified📅 Updated: Oct 19, 2026
  • CVE-2026-111862CVSS 9.8
    Rank Math SEO PRO for WordPress is affected by a supply-chain compromise in a subset of version 3.0.123...
    Admin intel📅 Updated: Oct 17, 2026
  • CVE-2026-111357CVSS 7.0
    Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to...
    Watchtower Verified📅 Updated: Oct 17, 2026
  • CVE-2025-61624CVSS 6.0
    An Improper Limitation of a Pathname to a Restricted Directory (\'Path Traversal\') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0...
    CISA KEV📅 Added to KEV: Oct 16, 2026
  • CVE-2026-102764CVSS 9.3
    The vulnerability exists within internal components of BeyondTrust’s Remote Support product. The components did not adequately validate the...
    CISA KEV📅 Added to KEV: Oct 16, 2026
  • CVE-2026-106931CVSS 8.5
    SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS...
    Admin intel📅 Updated: Oct 15, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2025-39496CVSS 9.3
    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WBW WooBeWoo Product Filter...
    📅 Updated: Oct 18, 2026
  • CVE-2025-48100CVSS 9.1
    Improper Control of Generation of Code ('Code Injection') vulnerability in extremeidea bidorbuy Store Integrator bidorbuystoreintegrator allows Remote Code...
    📅 Updated: Oct 18, 2026
  • CVE-2025-49387CVSS 10.0
    Unrestricted Upload of File with Dangerous Type vulnerability in add-ons.org Drag and Drop File Upload for Elementor Forms...
    📅 Updated: Oct 18, 2026
  • CVE-2025-49388CVSS 9.8
    Incorrect Privilege Assignment vulnerability in kamleshyadav Miraculous Core Plugin miraculouscore allows Privilege Escalation.This issue affects Miraculous Core Plugin:...
    📅 Updated: Oct 18, 2026
  • CVE-2025-52761CVSS 9.8
    Deserialization of Untrusted Data vulnerability in manfcarlo WP Funnel Manager wp-funnel-manager allows Object Injection.This issue affects WP Funnel...
    📅 Updated: Oct 18, 2026
  • CVE-2025-58159CVSS 9.9
    WeGIA is a Web manager for charitable institutions. Prior to version 3.4.11, a remote code execution vulnerability was...
    📅 Updated: Oct 18, 2026
  • CVE-2025-31100CVSS 9.9
    Unrestricted Upload of File with Dangerous Type vulnerability in Mojoomla School Management allows Upload a Web Shell to...
    📅 Updated: Oct 18, 2026
  • CVE-2025-53693CVSS 9.8
    Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Sitecore Sitecore Experience Manager (XM),...
    📅 Updated: Oct 18, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.