Skip to content
October 20, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
The Bicho: backdoor allowing remote control of cars Bicho
  • Vulnerability

The Bicho: backdoor allowing remote control of cars

Do Son March 19, 2018
Argentine security researchers, SHEILA AYELEN BERTA and CLAUDIO CARACCIOLO will plan to show how to use the hardware backdoor Bicho...
Read More Read more about The Bicho: backdoor allowing remote control of cars
BlackTDS: new Traffic Distribution System BlackTDS
  • Malware

BlackTDS: new Traffic Distribution System

Do Son March 19, 2018
According to Proofpoint researchers revealed that a new type of traffic distribution system (TDS) that spreads malicious...
Read More Read more about BlackTDS: new Traffic Distribution System
Ubuntu MATE 18.04 LTS will ship Familiar layout by default
  • Linux

Ubuntu MATE 18.04 LTS will ship Familiar layout by default

Do Son March 19, 2018
Ubuntu Mate project leader Wimpy announced today that the upcoming Ubuntu MATE 18.04 LTS (Bionic Beaver) will...
Read More Read more about Ubuntu MATE 18.04 LTS will ship Familiar layout by default
A Fakebank variant of Bank Trojan can intercept calls and connect victims to scammers
  • Malware

A Fakebank variant of Bank Trojan can intercept calls and connect victims to scammers

Do Son March 19, 2018
Security company Symantec said on Thursday that they discovered a new variant of Fakebank when analyzing malware-infected...
Read More Read more about A Fakebank variant of Bank Trojan can intercept calls and connect victims to scammers
Sublime, Vim, Emacs, Gedit, pico/nano text editor exisit privilege escalation vulnerability
  • Vulnerability

Sublime, Vim, Emacs, Gedit, pico/nano text editor exisit privilege escalation vulnerability

Do Son March 19, 2018
According to securityaffairs reports on March 16, after a series of recent attacks using exploits, SafeBreach researchers...
Read More Read more about Sublime, Vim, Emacs, Gedit, pico/nano text editor exisit privilege escalation vulnerability
Twitter will ban Cryptocurrency Ads
  • Technology

Twitter will ban Cryptocurrency Ads

Do Son March 19, 2018
According to Fortune reported on March 19th, Twitter will block ads for several types of cryptocurrency products...
Read More Read more about Twitter will ban Cryptocurrency Ads
Mozilla Firefox 59.0.1 released to fix two high risk vulnerabilities
  • Vulnerability

Mozilla Firefox 59.0.1 released to fix two high risk vulnerabilities

Do Son March 19, 2018
Firefox 59.0.1 contains security fixes. Mozilla has not posted any Firefox 59.0.1 release notes. Before Mozilla releases updates, Firefox users...
Read More Read more about Mozilla Firefox 59.0.1 released to fix two high risk vulnerabilities
Some Network Performance Tests for Windows Server 2016 and Linux Windows Server 2016 and Linux
  • Technology

Some Network Performance Tests for Windows Server 2016 and Linux

Do Son March 19, 2018
I believe many developers are interested in the difference in network performance between Windows Server and Linux. The...
Read More Read more about Some Network Performance Tests for Windows Server 2016 and Linux
In 2017, GitHub paid $166,000 in Bug Bounties
  • Technology

In 2017, GitHub paid $166,000 in Bug Bounties

Do Son March 19, 2018
Recently, GitHub announced on its blog that in 2017 they paid a total of $166,495 in rewards to security researchers. The...
Read More Read more about In 2017, GitHub paid $166,000 in Bug Bounties
Linux Mint 19 ‘Tara’ cinnamon launches faster app-launching
  • Linux

Linux Mint 19 ‘Tara’ cinnamon launches faster app-launching

Do Son March 19, 2018
The Linux Mint operating system is not slow, however, their development team found that when using the...
Read More Read more about Linux Mint 19 ‘Tara’ cinnamon launches faster app-launching
NGINX will support gRPC on the next version
  • Technology

NGINX will support gRPC on the next version

Do Son March 19, 2018
Recently, NGINX announced on its blog that NGINX has completed native support for gRPC and will provide...
Read More Read more about NGINX will support gRPC on the next version
EU wants to filter all code uploaded to the Internet
  • Technology

EU wants to filter all code uploaded to the Internet

Do Son March 18, 2018
A proposal from the European Union requires all platforms hosting content to check all uploaded content for...
Read More Read more about EU wants to filter all code uploaded to the Internet
The first Vatican hackathon event were held successfully
  • Technology

The first Vatican hackathon event were held successfully

Do Son March 17, 2018
According to TheNextWeb, the Vatican recently held its first hackathon event. The event invited 120 students from all...
Read More Read more about The first Vatican hackathon event were held successfully
HotSpot Shield, PureVPN, and Zenmate flaw leaks your IP address
  • Vulnerability

HotSpot Shield, PureVPN, and Zenmate flaw leaks your IP address

Do Son March 17, 2018
Recently, researchers have discovered that HotSpot Shield, PureVPN, and Zenmate, three popular VPNs, have security problems that...
Read More Read more about HotSpot Shield, PureVPN, and Zenmate flaw leaks your IP address
RottenSys malware infects nearly 5 million Android devices RottenSys
  • Malware

RottenSys malware infects nearly 5 million Android devices

Do Son March 17, 2018
According to securityaffairs on March 14 news, security company Check Point this week revealed a malicious software family called RottenSys –...
Read More Read more about RottenSys malware infects nearly 5 million Android devices
Ubuntu provided a smaller image file for the upcoming Ubuntu 18.04 LTS, only 28MB
  • Linux

Ubuntu provided a smaller image file for the upcoming Ubuntu 18.04 LTS, only 28MB

Do Son March 17, 2018
Dustin Kirkland, vice president of product development at Canonical, stated that the smallest image file for Ubuntu...
Read More Read more about Ubuntu provided a smaller image file for the upcoming Ubuntu 18.04 LTS, only 28MB
Zorin OS 12.3 released, Ubuntu-based Linux distribution Zorin OS
  • Linux

Zorin OS 12.3 released, Ubuntu-based Linux distribution

Do Son March 17, 2018
“Zorin OS is an Ubuntu-based Linux distribution designed especially for newcomers to Linux. It has a Windows-like...
Read More Read more about Zorin OS 12.3 released, Ubuntu-based Linux distribution
Pwn2Own 2018: Microsoft Edge, Apple Safari, Oracle VirtualBox and Mozilla Firefox were defeat by hacker
  • Technology
  • Vulnerability

Pwn2Own 2018: Microsoft Edge, Apple Safari, Oracle VirtualBox and Mozilla Firefox were defeat by hacker

Do Son March 16, 2018
On March 15-16, the 2018 Pwn2Own game came to a close. As of now, the organizer Zero...
Read More Read more about Pwn2Own 2018: Microsoft Edge, Apple Safari, Oracle VirtualBox and Mozilla Firefox were defeat by hacker
Attacker pushes trojanized BitTorrent software, infects nearly 500,000 computers within 12 hours
  • Malware

Attacker pushes trojanized BitTorrent software, infects nearly 500,000 computers within 12 hours

Do Son March 16, 2018
According to thehackernews on March 14, a large-scale malware intrusion occurred in Russia and central Europe last...
Read More Read more about Attacker pushes trojanized BitTorrent software, infects nearly 500,000 computers within 12 hours
ESET: OceanLotus APT has been using a new backdoor in recently observed attacks OceanLotus APT
  • Malware

ESET: OceanLotus APT has been using a new backdoor in recently observed attacks

Do Son March 16, 2018
According to securityaffairs on March 14, the security company ESET released an analysis report that the OceanLotus APT organization...
Read More Read more about ESET: OceanLotus APT has been using a new backdoor in recently observed attacks
243 organizations worldwide were affected by Qrypter RAT Qrypter RAT
  • Malware

243 organizations worldwide were affected by Qrypter RAT

Do Son March 16, 2018
A security company Forcepoint found that in the past two years, a hacking organization claiming to be...
Read More Read more about 243 organizations worldwide were affected by Qrypter RAT
Google says “Android security has matured”, hackers are difficult and expensive to high severity exploits
  • Android
  • Technology

Google says “Android security has matured”, hackers are difficult and expensive to high severity exploits

Do Son March 16, 2018
Which platform is more secure, iOS or Android? I believe that even Android users will vote for their...
Read More Read more about Google says “Android security has matured”, hackers are difficult and expensive to high severity exploits
❮ Prev Page
Next Page ❯

Search

Translation

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-66373CVSS 7.5
    Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE, allows remote code execution...
    Admin intel📅 Updated: Oct 20, 2026
  • CVE-2026-110936CVSS 8.4
    A vulnerability has been identified in Siemens Software Center (All versions < V4.0.9.8). The affected application loads dynamic-link...
    Admin intel📅 Updated: Oct 20, 2026
  • CVE-2020-13125CVSS 7.2
    An issue was discovered in the "Ultimate Addons for Elementor" plugin before 1.24.2 for WordPress, as exploited in...
    Watchtower Verified📅 Updated: Oct 20, 2026
  • CVE-2020-13126CVSS 9.9
    An issue was discovered in the Elementor Pro plugin before 2.9.4 for WordPress, as exploited in the wild...
    Watchtower Verified📅 Updated: Oct 20, 2026
  • CVE-2019-20180CVSS 8.0
    The TablePress plugin for WordPress is vulnerable to CSV Injection in versions up to and including 1.14 via...
    Watchtower Verified📅 Updated: Oct 20, 2026
  • CVE-2026-111862CVSS 9.8
    Rank Math SEO PRO for WordPress is affected by a supply-chain compromise in a subset of version 3.0.123...
    Admin intel📅 Updated: Oct 17, 2026
  • CVE-2026-111357CVSS 7.0
    Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to...
    Watchtower Verified📅 Updated: Oct 17, 2026
  • CVE-2025-61624CVSS 6.0
    An Improper Limitation of a Pathname to a Restricted Directory (\'Path Traversal\') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0...
    CISA KEV📅 Added to KEV: Oct 16, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-110646CVSS 9.2
    Beganovich snappdf from 1.1.0 before 6.1.0 contains an OS command injection vulnerability on Windows that allows attackers to...
    📅 Updated: Oct 20, 2026
  • CVE-2026-110636CVSS 9.3
    pypdftk through 0.5 contains an OS command injection vulnerability in fill_form(), dump_data_fields(), and pdftk_cmd_util() that builds shell commands...
    📅 Updated: Oct 20, 2026
  • CVE-2026-110631CVSS 9.3
    Komodo through 2.3.3 contains an authentication bypass vulnerability in the Periphery agent that allows unauthenticated attackers to connect...
    📅 Updated: Oct 20, 2026
  • CVE-2026-110616CVSS 9.2
    NullHub through 2026.5.29 contains a missing authentication vulnerability that allows unauthenticated attackers to access the /api/* management API...
    📅 Updated: Oct 20, 2026
  • CVE-2026-77936CVSS 9.3
    Letta through 0.16.8 ships a compose.yaml that does not enable LETTA_SERVER_SECURE, so the password middleware is never added...
    📅 Updated: Oct 20, 2026
  • CVE-2026-77933CVSS 9.3
    DB-GPT through 0.8.2 contains a hardcoded credentials vulnerability in its default docker-compose.yml that sets a static MYSQL_ROOT_PASSWORD and...
    📅 Updated: Oct 20, 2026
  • CVE-2026-77932CVSS 9.3
    DB-GPT through 0.8.2 contains an unauthenticated remote code execution vulnerability because the /api/v1/chat/react-agent endpoint relies on a mock...
    📅 Updated: Oct 20, 2026
  • CVE-2026-75128CVSS 9.3
    Langchain-Chatchat through 0.3.1.3 exposes a POST /tools/call API endpoint that invokes any registered tool by name without authentication,...
    📅 Updated: Oct 20, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.