Skip to content
October 19, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
Siemens SIMATIC PLC exists DoS flaw
  • Vulnerability

Siemens SIMATIC PLC exists DoS flaw

Do Son May 17, 2018
In a security announcement issued on Tuesday, Siemens AG (SIEMENS, Germany) informed customers that the Central Processing...
Read More Read more about Siemens SIMATIC PLC exists DoS flaw
U.S. Phone Tracking Company Securus data leak: 2,800 logins & poorly encrypted passwords had already been cracked
  • Data Leak

U.S. Phone Tracking Company Securus data leak: 2,800 logins & poorly encrypted passwords had already been cracked

Do Son May 17, 2018
According to CNET report, US Senator Ron Wyden has exposed Securus to provide the police with the...
Read More Read more about U.S. Phone Tracking Company Securus data leak: 2,800 logins & poorly encrypted passwords had already been cracked
Amazon S3 Bucket Misconfiguration Exposure Indian Cricket players sensitive information
  • Data Leak

Amazon S3 Bucket Misconfiguration Exposure Indian Cricket players sensitive information

Do Son May 17, 2018
Earlier this month, researchers at the Kromtech Security Center once again discovered two Amazon S3 buckets that...
Read More Read more about Amazon S3 Bucket Misconfiguration Exposure Indian Cricket players sensitive information
Android P will silently crash app instead of showing popup dialog
  • Android

Android P will silently crash app instead of showing popup dialog

Do Son May 16, 2018
When the Android app stops responding, the system will pop up a dialog asking the user whether...
Read More Read more about Android P will silently crash app instead of showing popup dialog
Google Faces Australian Government Investigation due to collecting user data Australian Government Investigation
  • Data Leak

Google Faces Australian Government Investigation due to collecting user data

Do Son May 16, 2018
Google is facing an investigation by the Australian government because it may illegally acquire data from millions...
Read More Read more about Google Faces Australian Government Investigation due to collecting user data
Hackers attack Danish Railway Company DSB
  • Cyber Security

Hackers attack Danish Railway Company DSB

Do Son May 16, 2018
Danish Railway Company DSB (Danske Statsbaner) confirmed that it suffered a large-scale DDoS attack on May 13....
Read More Read more about Hackers attack Danish Railway Company DSB
CVE-2018-1111: Red Hat DHCP Client Script Code Execution Vulnerability
  • Vulnerability

CVE-2018-1111: Red Hat DHCP Client Script Code Execution Vulnerability

Do Son May 16, 2018
On May 15, Red Hat officially issued a notice that it fixed a DHCP Client related vulnerability...
Read More Read more about CVE-2018-1111: Red Hat DHCP Client Script Code Execution Vulnerability
Kaspersky Lab transferred data from Russia to Switzerland to increase transparency Lithuania ban Kaspersky Lab
  • Technology

Kaspersky Lab transferred data from Russia to Switzerland to increase transparency

Do Son May 16, 2018
Kaspersky Lab announced plans to transfer data from Russia to a new data center in Switzerland. This move...
Read More Read more about Kaspersky Lab transferred data from Russia to Switzerland to increase transparency
The Open Source Smart Watch Systems AsteroidOS 1.0 Release AsteroidOS
  • Technology

The Open Source Smart Watch Systems AsteroidOS 1.0 Release

Do Son May 16, 2018
From the initial struggle of one individual to more than 100 contributors worldwide, AsteroidOS, the open-source smartwatch...
Read More Read more about The Open Source Smart Watch Systems AsteroidOS 1.0 Release
GNOME 3.30 will redesign Lock and Login Screen GNOME 3.30
  • Linux

GNOME 3.30 will redesign Lock and Login Screen

Do Son May 15, 2018
The GNOME behind-the-scenes development team is currently working on improving the lock/login screen interface and is expected...
Read More Read more about GNOME 3.30 will redesign Lock and Login Screen
New Technology Uses UPnP Protocol to Avoid DDoS Mitigation UPnP Protocol
  • Technology

New Technology Uses UPnP Protocol to Avoid DDoS Mitigation

Do Son May 15, 2018
According to bleepingcomputer reports on the 15th, the United States well-known cybersecurity company Imperva issued a report...
Read More Read more about New Technology Uses UPnP Protocol to Avoid DDoS Mitigation
Google Gmail officially supports offline mode
  • Technology

Google Gmail officially supports offline mode

Do Son May 15, 2018
In April 2018, Google made a new revision of Gmail, and some users can experience new UI...
Read More Read more about Google Gmail officially supports offline mode
Microsoft announces that Bing will block cryptocurrency ads Bing Blocking Bitcoin
  • Technology

Microsoft announces that Bing will block cryptocurrency ads

Do Son May 15, 2018
According to Softpedia reports, Microsoft recently announced that because cryptocurrency advertising constitutes a “high risk” for users, Bing...
Read More Read more about Microsoft announces that Bing will block cryptocurrency ads
Adobe Acrobat and Reader Multiple Security Vulnerabilities
  • Vulnerability

Adobe Acrobat and Reader Multiple Security Vulnerabilities

Do Son May 15, 2018
On May 14, local time, Adobe officially released a security notice that fixed several bugs in Adobe...
Read More Read more about Adobe Acrobat and Reader Multiple Security Vulnerabilities
PANDA Banker Malware Attacks Bank Institutions, Cryptocurrency Trading Platforms, and Social Media
  • Malware

PANDA Banker Malware Attacks Bank Institutions, Cryptocurrency Trading Platforms, and Social Media

Do Son May 15, 2018
Security company F5 recently released a report saying that hackers use PANDA Banker malware to frequently attack banking...
Read More Read more about PANDA Banker Malware Attacks Bank Institutions, Cryptocurrency Trading Platforms, and Social Media
The Dutch government also gave up Kaspersky Lab’s software products due to security concerns Lithuania ban Kaspersky Lab
  • Technology

The Dutch government also gave up Kaspersky Lab’s software products due to security concerns

Do Son May 15, 2018
After being blocked by the U.S. government and related agencies, Kaspersky Lab, headquartered in Moscow, suffered another...
Read More Read more about The Dutch government also gave up Kaspersky Lab’s software products due to security concerns
Google launches Google One
  • Technology

Google launches Google One

Do Son May 15, 2018
Google Drive, Google’s cloud storage service, recently announced an adjustment and upgrade to provide consumers with an...
Read More Read more about Google launches Google One
New Vega Stealer malware used Microsoft Word as an attack vector Vega Stealer malware
  • Malware

New Vega Stealer malware used Microsoft Word as an attack vector

Do Son May 15, 2018
Recently, cybersecurity firm Proofpoint observed a spear phishing campaign targeting marketing, advertising, public relations, and retail and...
Read More Read more about New Vega Stealer malware used Microsoft Word as an attack vector
Muti vulnerabilities (Remote Code Execution) exist on Spring
  • Vulnerability

Muti vulnerabilities (Remote Code Execution) exist on Spring

Do Son May 15, 2018
On May 9, Spring released several security announcements that fixed several security vulnerabilities, including a high-risk remote...
Read More Read more about Muti vulnerabilities (Remote Code Execution) exist on Spring
U.S. police use vendor services to locate anyone’s mobile phone in seconds
  • Data Leak

U.S. police use vendor services to locate anyone’s mobile phone in seconds

Do Son May 15, 2018
According to New York Times report that a company that primarily handles prison phone systems uses data-sharing...
Read More Read more about U.S. police use vendor services to locate anyone’s mobile phone in seconds
South Korea’s largest cryptocurrency exchange, Upbit was investigated by Korea’s Financial Watchdog
  • Technology

South Korea’s largest cryptocurrency exchange, Upbit was investigated by Korea’s Financial Watchdog

Do Son May 15, 2018
Upbit, the largest cryptocurrency exchange in South Korea, was recently raided by a South Korean prosecutor. Upbit’s announcement...
Read More Read more about South Korea’s largest cryptocurrency exchange, Upbit was investigated by Korea’s Financial Watchdog
Greenie Linux 18.04 released: Linux distribution for slovak/czech and e-book readers and authors Greenie Linux
  • Linux

Greenie Linux 18.04 released: Linux distribution for slovak/czech and e-book readers and authors

Do Son May 15, 2018
Greenie is one of the Linux distributions. Unlike any other, it is originally from Slovakia and prepared...
Read More Read more about Greenie Linux 18.04 released: Linux distribution for slovak/czech and e-book readers and authors
❮ Prev Page
Next Page ❯

Search

Translation

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2020-13125CVSS 7.2
    An issue was discovered in the "Ultimate Addons for Elementor" plugin before 1.24.2 for WordPress, as exploited in...
    Watchtower Verified📅 Updated: Oct 19, 2026
  • CVE-2020-13126CVSS 9.9
    An issue was discovered in the Elementor Pro plugin before 2.9.4 for WordPress, as exploited in the wild...
    Watchtower Verified📅 Updated: Oct 19, 2026
  • CVE-2019-20180CVSS 8.0
    The TablePress plugin for WordPress is vulnerable to CSV Injection in versions up to and including 1.14 via...
    Watchtower Verified📅 Updated: Oct 19, 2026
  • CVE-2026-111862CVSS 9.8
    Rank Math SEO PRO for WordPress is affected by a supply-chain compromise in a subset of version 3.0.123...
    Admin intel📅 Updated: Oct 17, 2026
  • CVE-2026-111357CVSS 7.0
    Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to...
    Watchtower Verified📅 Updated: Oct 17, 2026
  • CVE-2025-61624CVSS 6.0
    An Improper Limitation of a Pathname to a Restricted Directory (\'Path Traversal\') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0...
    CISA KEV📅 Added to KEV: Oct 16, 2026
  • CVE-2026-102764CVSS 9.3
    The vulnerability exists within internal components of BeyondTrust’s Remote Support product. The components did not adequately validate the...
    CISA KEV📅 Added to KEV: Oct 16, 2026
  • CVE-2026-106931CVSS 8.5
    SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS...
    Admin intel📅 Updated: Oct 15, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-103091CVSS 9.3
    Missing Authorization (CWE-862) and Initialization of a Resource with an Insecure Default (CWE-1188) in the MCP proxy (HandleStreamPassThrough...
    📅 Updated: Oct 19, 2026
  • CVE-2026-102503CVSS 9.3
    Missing Authentication for Critical Function (CWE-306) and Missing Authorization (CWE-862) in the /libp2p-http ingress server (StartIngressServer in cmd/sam-node/node.go)...
    📅 Updated: Oct 19, 2026
  • CVE-2026-108983CVSS 9.8
    A vulnerability is in Web Server default connection ports under the process name GeoWebServer.exe .
    📅 Updated: Oct 19, 2026
  • CVE-2025-39496CVSS 9.3
    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WBW WooBeWoo Product Filter...
    📅 Updated: Oct 18, 2026
  • CVE-2025-48100CVSS 9.1
    Improper Control of Generation of Code ('Code Injection') vulnerability in extremeidea bidorbuy Store Integrator bidorbuystoreintegrator allows Remote Code...
    📅 Updated: Oct 18, 2026
  • CVE-2025-49387CVSS 10.0
    Unrestricted Upload of File with Dangerous Type vulnerability in add-ons.org Drag and Drop File Upload for Elementor Forms...
    📅 Updated: Oct 18, 2026
  • CVE-2025-49388CVSS 9.8
    Incorrect Privilege Assignment vulnerability in kamleshyadav Miraculous Core Plugin miraculouscore allows Privilege Escalation.This issue affects Miraculous Core Plugin:...
    📅 Updated: Oct 18, 2026
  • CVE-2025-52761CVSS 9.8
    Deserialization of Untrusted Data vulnerability in manfcarlo WP Funnel Manager wp-funnel-manager allows Object Injection.This issue affects WP Funnel...
    📅 Updated: Oct 18, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.