Skip to content
October 21, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
Windows 10 facial recognition feature exist vulnerablity that can use a photo to unlock the computer Windows 10 facial recognition
  • Vulnerability

Windows 10 facial recognition feature exist vulnerablity that can use a photo to unlock the computer

Do Son December 22, 2017
Earlier this month, Microsoft released an update to fix a vulnerability in Windows Hello facial recognition system...
Read More Read more about Windows 10 facial recognition feature exist vulnerablity that can use a photo to unlock the computer
Captcha Plugin include backdoor that affects 300K WordPress sites
  • Malware

Captcha Plugin include backdoor that affects 300K WordPress sites

Do Son December 22, 2017
WordFence security experts found that Captcha WordPress plugin that downloads as much as 300,000 times, hides a backdoor...
Read More Read more about Captcha Plugin include backdoor that affects 300K WordPress sites
GCHQ, British intelligence agency has weapons that can weaken hostile states British intelligence agency
  • News

GCHQ, British intelligence agency has weapons that can weaken hostile states

Do Son December 22, 2017
According to the IBTIMES English website reported on the 21st, the British intelligence agency GCHQ recently revealed that the...
Read More Read more about GCHQ, British intelligence agency has weapons that can weaken hostile states
New Catelites Bot malware: camouflage more than 2,200 bank APP login screen for overlay screens
  • Malware

New Catelites Bot malware: camouflage more than 2,200 bank APP login screen for overlay screens

Do Son December 22, 2017
According to foreign media reported on December 20, the Czech software company Avast recently found that a...
Read More Read more about New Catelites Bot malware: camouflage more than 2,200 bank APP login screen for overlay screens
Symantec: Many website inserted Cryptocurrency Mining Script
  • News

Symantec: Many website inserted Cryptocurrency Mining Script

Do Son December 21, 2017
In recent years, along with encryption currency prices are constantly pushed, hackers also played a crooked brains to profit. According...
Read More Read more about Symantec: Many website inserted Cryptocurrency Mining Script
Security researchers found the Apple HomeKit vulnerability Apple HomeKit vulnerability
  • Vulnerability

Security researchers found the Apple HomeKit vulnerability

Do Son December 21, 2017
As early as the beginning of this month, some developers found a serious flaw in HomeKit that allowed anyone to control...
Read More Read more about Security researchers found the Apple HomeKit vulnerability
Over 1,000 Lexmark printers worldwide are exposed online
  • News

Over 1,000 Lexmark printers worldwide are exposed online

Do Son December 21, 2017
Security researchers at NewSky Security have again brought us bad news about IoT security once again and...
Read More Read more about Over 1,000 Lexmark printers worldwide are exposed online
YouBit, South Korea’s bitcoin exchange, was hacked and announcing bankruptcy
  • News

YouBit, South Korea’s bitcoin exchange, was hacked and announcing bankruptcy

Do Son December 21, 2017
According to a Reuters report on December 19, Youbit, the South Korean cryptocurrency exchange, announced on Tuesday that it will close...
Read More Read more about YouBit, South Korea’s bitcoin exchange, was hacked and announcing bankruptcy
US Department of Homeland Security alert Malware Targeting Industrial Safety Systems Industrial Safety Systems
  • Malware

US Department of Homeland Security alert Malware Targeting Industrial Safety Systems

Do Son December 21, 2017
Network security companies FireEye and Dragos reported last week that the new malware, Triton, and Trisis, shut...
Read More Read more about US Department of Homeland Security alert Malware Targeting Industrial Safety Systems
123 million American households information leaked online
  • Data Leak

123 million American households information leaked online

Do Son December 21, 2017
According to foreign media reports, UpGuard, a California-based cybersecurity company, said the inclusion of Amazon Web Services (AWS)...
Read More Read more about 123 million American households information leaked online
Research reveals that DragonFly malware is closely linked to attacks such as BlackEnergy and TeamSpy DragonFly malware
  • Malware

Research reveals that DragonFly malware is closely linked to attacks such as BlackEnergy and TeamSpy

Do Son December 21, 2017
McAfee Labs used the evidence gathered to show that DragonFly malware has a lot to do with other hacking...
Read More Read more about Research reveals that DragonFly malware is closely linked to attacks such as BlackEnergy and TeamSpy
New PRILEX malware: ATM traps tailored to Brazilian banks
  • Malware

New PRILEX malware: ATM traps tailored to Brazilian banks

Do Son December 20, 2017
According to foreign media reported on December 17, Trend Micro’s security researchers recently discovered a malicious ATM called...
Read More Read more about New PRILEX malware: ATM traps tailored to Brazilian banks
Top Ten Worst Password of 2017 Announced
  • News

Top Ten Worst Password of 2017 Announced

Do Son December 20, 2017
We’re being overwhelmed with passwords, passwords from e-mail accounts and Facebook passwords to mobile banking and video...
Read More Read more about Top Ten Worst Password of 2017 Announced
CVE-2017-17562: GoAhead httpd 2.5 – 3.5 Remote Code Execution Vulnerability CVE-2017-17562
  • Vulnerability

CVE-2017-17562: GoAhead httpd 2.5 – 3.5 Remote Code Execution Vulnerability

Do Son December 20, 2017
Today, a remote code execution vulnerability (CVE-2017-17562) exists in all versions of GoAhead Web Server that broke...
Read More Read more about CVE-2017-17562: GoAhead httpd 2.5 – 3.5 Remote Code Execution Vulnerability
ProcDump for Linux v3.2 releases: Linux version of the ProcDump Sysinternals tool ProcDump Linux
  • Linux

ProcDump for Linux v3.2 releases: Linux version of the ProcDump Sysinternals tool

Do Son December 6, 2017
ProcDump is a Linux reimagining of the classic ProcDump tool from the Sysinternals Suite of tools for...
Read More Read more about ProcDump for Linux v3.2 releases: Linux version of the ProcDump Sysinternals tool
LXLE Eclectica 16.04.3 released, based-Lubuntu LXLE Eclectica
  • Linux

LXLE Eclectica 16.04.3 released, based-Lubuntu

Do Son November 24, 2017
LXLE Eclectica 16.04.3 was released, the official said it will support until 2021 and contains some bug fixes. LXLE Eclectica...
Read More Read more about LXLE Eclectica 16.04.3 released, based-Lubuntu
IBM Launches Quad9 Public DNS Service 9.9.9.9 Quad9 Public DNS
  • News

IBM Launches Quad9 Public DNS Service 9.9.9.9

Do Son November 17, 2017
IBM, Global Cyber Alliance, and Packet Clearing House partnered to launch the free Quad9 public DNS service (9.9.9.9) that will block domains associated with botnets,...
Read More Read more about IBM Launches Quad9 Public DNS Service 9.9.9.9
What are CSRF tokens and how do they work?
  • Technique

What are CSRF tokens and how do they work?

Do Son October 25, 2017
Understanding CSRF The Express team’s csrf and csurf modules frequently have issues popping up concerned about our usage of cryptographic functions....
Read More Read more about What are CSRF tokens and how do they work?
Non-Malware (or Fileless) Attack: five knowledge points Fileless attack
  • Technique

Non-Malware (or Fileless) Attack: five knowledge points

Do Son October 24, 2017
Since May this year, WannaCry extortion software in the global outbreak, there have been Equifax experienced large-scale...
Read More Read more about Non-Malware (or Fileless) Attack: five knowledge points
[Linux] Looks for processes that listen on specified ports
  • Linux

[Linux] Looks for processes that listen on specified ports

Do Son October 3, 2017
Look for the process of listening on the specified port, for the system administrator, is an eternal...
Read More Read more about [Linux] Looks for processes that listen on specified ports
How to enable VPN on Kali Linux India VPN
  • Technique

How to enable VPN on Kali Linux

Do Son September 30, 2017 0
A virtual private network (VPN) extends a private network through a public network, such as the Internet....
Read More Read more about How to enable VPN on Kali Linux
How to install Kali Linux on Google Cloud
  • Technique

How to install Kali Linux on Google Cloud

Do Son September 24, 2017
On this post, I am going to guide you how to install & upload your Kali Linux...
Read More Read more about How to install Kali Linux on Google Cloud
❮ Prev Page
Next Page ❯

Search

Translation

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2020-13125CVSS 7.2
    An issue was discovered in the "Ultimate Addons for Elementor" plugin before 1.24.2 for WordPress, as exploited in...
    Watchtower Verified📅 Updated: Oct 21, 2026
  • CVE-2020-13126CVSS 9.9
    An issue was discovered in the Elementor Pro plugin before 2.9.4 for WordPress, as exploited in the wild...
    Watchtower Verified📅 Updated: Oct 21, 2026
  • CVE-2019-20180CVSS 8.0
    The TablePress plugin for WordPress is vulnerable to CSV Injection in versions up to and including 1.14 via...
    Watchtower Verified📅 Updated: Oct 21, 2026
  • CVE-2012-20002CVSS 8.7
    TinyMCE Thumbnail Gallery plugin for WordPress before 1.1.0 contains a path traversal vulnerability that allows unauthenticated attackers to...
    Watchtower Verified📅 Updated: Oct 21, 2026
  • CVE-2012-20003CVSS 5.1
    Custom Tables plugin for WordPress before 3.4.6 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to...
    Watchtower Verified📅 Updated: Oct 21, 2026
  • CVE-2012-20004CVSS 5.1
    K-news plugin for WordPress before 1.1.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject...
    Watchtower Verified📅 Updated: Oct 21, 2026
  • CVE-2026-66373CVSS 7.5
    Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE, allows remote code execution...
    Admin intel📅 Updated: Oct 20, 2026
  • CVE-2026-96652CVSS 5.3
    Plex Media Server before 1.43.3.10861 allows SSRF via '/player/timeline'. An attacker using any X-Plex-Token value can include a...
    CISA KEV📅 Added to KEV: Oct 20, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-71195CVSS 9.9
    In OpenStack Manila before 23.0.1, multiple Manila API operations on public shares do not verify that the caller...
    📅 Updated: Oct 21, 2026
  • CVE-2026-106173CVSS 9.8
    A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5.0 may...
    📅 Updated: Oct 21, 2026
  • CVE-2026-86471CVSS 9.3
    An unvalidated runtime configuration value in Apache CouchDB 3.5.2 and below on all platforms allows a CouchDB server...
    📅 Updated: Oct 21, 2026
  • CVE-2026-26846CVSS 9.8
    Buffer Overflow vulnerability in WEINVEIW CO.,LTD EBPro v.6.10.01.510_20251022 allows a remote attacker to execute arbitrary code via the...
    📅 Updated: Oct 21, 2026
  • CVE-2026-111281CVSS 9.3
    Jooan JA-A12 IP cameras with firmware 009_20171107 and 05.02.31.105 contain a remote code execution vulnerability that allows unauthenticated...
    📅 Updated: Oct 21, 2026
  • CVE-2026-113744CVSS 10.0
    A security vulnerability has been detected in Tenda AC19 16.03.10.07. The impacted element is the function formSetFirewallCfg of...
    📅 Updated: Oct 21, 2026
  • CVE-2026-57496CVSS 9.6
    NetLicensing MCP Server is a natural-language interface that enables agentic applications to manage the software-licensing lifecycle in Labs64...
    📅 Updated: Oct 21, 2026
  • CVE-2026-113342CVSS 9.6
    Memory corruption in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code...
    📅 Updated: Oct 21, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.