Microsoft discloses more than 130 vulnerabilities as part of July’s Patch Tuesday, four exploited in the wildCisco Talos·Jul 11, 19:26 UTC · Jul 11, 2023Exploit / PoC in the wildCVE-2023-32046CVE-2023-32049CVE-2023-35311+6 CVEs160
Android 17 Beta Introduces Secure-ByInfosecurity Magazine·Feb 17, 16:00 UTC · Feb 17, 2026Exploit / PoC in the wild60
Critical Unpatched SharePoint Zero-Day Actively Exploited, Breaches 75+ Company ServersThe Hacker News·Jul 22, 03:59 UTC · Jul 22, 2025Exploit / PoC in the wildCVE-2025-53770CVE-2025-49704CVE-2025-49706+1 CVEs60
Attackers exploiting zero-day vulnerability in Windows Installer — Here’s what you need to know and Talos’ coverageCisco Talos·Nov 23, 18:29 UTC · Nov 23, 2021Exploit / PoCCVE-2021-4137960
Apple plugs zero-day holes used in targeted iPhone attacks (CVE-2025-31200, CVE-2025-31201)Help Net Security·Apr 17, 00:00 UTC · Apr 17, 2025Exploit / PoCCVE-2025-31200CVE-2025-31201CVE-2025-2420060
Two New Windows Zero-Days Exploited in the Wild — One Affects Every Version Ever ShippedThe Hacker News·Oct 15, 00:00 UTC · Oct 15, 2025Exploit / PoC in the wildCVE-2025-24990CVE-2025-59230CVE-2025-47827+5 CVEs160
Critical Magento zero-day flaw CVE-2022Security Affairs·Feb 14, 12:09 UTC · Feb 14, 2022Exploit / PoC in the wildCVE-2022-2408660
Apple rolled out emergency updates to address 3 new actively exploited zeroSecurity Affairs·Sep 21, 21:57 UTC · Sep 21, 2023Exploit / PoC in the wildCVE-2023-41993CVE-2023-41991CVE-2023-41992+13 CVEs160
Public PoC triggers active exploitation of critical SharePoint RCE vulnerability CVE-2026Security Affairs·Jul 21, 21:38 UTC · Jul 21, 2026Exploit / PoC in the wildCVE-2026-50522CVE-2026-58644CVE-2026-45659+2 CVEs160
Week in review: Microsoft, Apple patch exploited zero-days, tips for getting hired in cybersecurityHelp Net Security·Feb 19, 00:00 UTC · Feb 19, 2023Exploit / PoC in the wildCVE-2023-21715CVE-2023-23376CVE-2023-21823+2 CVEs60
Microsoft fixes 2 critical Exchange Server flaws reported by the NSASecurity Affairs·Apr 13, 21:05 UTC · Apr 13, 2021Exploit / PoCCVE-2021-28480CVE-2021-28481CVE-2021-28482+1 CVEs60
PoC exploit accidentally leaks for dangerous Windows PrintNightmare bugThe Record·Jan 18, 00:00 UTC · Jan 18, 2023Exploit / PoCCVE-2021-1675CVE-2020-133760
Experts show how to bypass Windows Hello feature to login on Windows 10 PCsSecurity Affairs·Jul 19, 08:20 UTC · Jul 19, 2021Exploit / PoCCVE-2021-3446650
Micropatch simulates workaround for recent zero-day IE flaw, removes negative side effectsHelp Net Security·Jan 21, 00:00 UTC · Jan 21, 2020Exploit / PoC in the wildCVE-2020-067460
Microsoft Confirms RoguePlanet ZeroSecurity Affairs·Jun 18, 09:21 UTC · Jun 18, 2026Exploit / PoCCVE-2026-50656CVE-2026-33825CVE-2026-45498+1 CVEs60
FTP Injection flaws in Java and Python allows firewall bypassSecurity Affairs·Feb 22, 15:25 UTC · Feb 22, 2017Exploit / PoC145
Zyxel fixes a critical bug in its business firewall and VPN devicesSecurity Affairs·Apr 1, 09:51 UTC · Apr 1, 2022Exploit / PoCCVE-2022-034260
PoC exploit for Ivanti Endpoint Manager vulnerabilities released (CVE-2024-13159)Help Net Security·Feb 24, 00:00 UTC · Feb 24, 2025Exploit / PoC in the wildCVE-2024-13159CVE-2024-10811CVE-2024-13161+1 CVEs60
About the Flash zero-day currently exploited in the wildHelp Net Security·Feb 5, 00:00 UTC · Feb 5, 2018Exploit / PoC in the wildCVE-2018-487860
⚡ THN Weekly Recap: Alerts on Zero-Day Exploits, AI Breaches, and Crypto HeistsThe Hacker News·May 6, 07:05 UTC · May 6, 2025Exploit / PoCCVE-2024-53104CVE-2024-53197CVE-2024-50302+25 CVEs60
Experts disclosed a critical flaw in Schneider Industrial FirewallsSecurity Affairs·Oct 27, 08:04 UTC · Oct 27, 2016Exploit / PoC60
Apache Software Foundation fixes code execution flaw in Apache Struts 2Security Affairs·Dec 9, 07:36 UTC · Dec 9, 2020Exploit / PoCCVE-2020-17530CVE-2019-0230160
Week in review: Firmware-level Android backdoor found on tablets, Dell zero-day exploited since 2024Help Net Security·Feb 22, 00:00 UTC · Feb 22, 2026Exploit / PoC in the wildCVE-2026-2441CVE-2026-22769CVE-2026-2329+1 CVEs60
Cisco fixes exploitable RCEs in Cisco Security ManagerSecurity Affairs·Dec 7, 21:01 UTC · Dec 7, 2020Exploit / PoCCVE-2020-27125CVE-2020-27130CVE-2020-2713160
Week in review: PoC for Splunk Enterprise RCE flaw released, scope of Okta breach widensHelp Net Security·Dec 3, 00:00 UTC · Dec 3, 2023Exploit / PoC in the wildCVE-2023-46214CVE-2023-49103CVE-2023-41998+5 CVEs260
Just 10 lines of code can steal AI secrets from Apple, AMD, and Qualcomm GPUsArs Technica · Security·Jan 17, 18:15 UTC · Jan 17, 2024Exploit / PoC57
Google: Android bug detected exploited in the wildThe Record·Nov 17, 00:00 UTC · Nov 17, 2022Exploit / PoC in the wildCVE-2020-1126160
Acrobat Reader zero-day exploited in the wild for many months (CVE-2026-34621)Help Net Security·Apr 12, 14:38 UTC · Apr 12, 2026Exploit / PoC in the wildCVE-2026-3462160
Apple re-released Rapid Security Response to fix recently disclosed zeroSecurity Affairs·Jul 13, 21:18 UTC · Jul 13, 2023Exploit / PoC in the wildCVE-2023-3745060
Apple delivers belated zero-day patch for iOS v12 (CVE-2022-42856)Help Net Security·Jan 24, 00:00 UTC · Jan 24, 2023Exploit / PoC in the wildCVE-2022-4285660
Hackers target Windows users exploiting a ZeroSecurity Affairs·May 13, 18:43 UTC · May 13, 2021Exploit / PoC in the wildCVE-2021-28550CVE-2021-28561CVE-2021-28560+9 CVEs60
Week in review: Google fixes exploited Chrome zero-day, Patch Tuesday forecastHelp Net Security·Jun 8, 00:00 UTC · Jun 8, 2025Exploit / PoC in the wildCVE-2025-541960
Update: Hacker Disclosed 4 New Microsoft ZeroThe Hacker News·May 23, 14:49 UTC · May 23, 2019Exploit / PoCCVE-2019-0863CVE-2019-084160
Chinese drone maker DJI launches bug bounty program after U.S. Army banCyberScoop·Aug 28, 22:22 UTC · Aug 28, 2017Exploit / PoC in the wild60
Adobe fixed the CVE-2018-5002 Flash Zero-Day exploited in targeted attacks in the Middle EastSecurity Affairs·Jun 7, 14:17 UTC · Jun 7, 2018Exploit / PoCCVE-2018-5002CVE-2018-4945CVE-2018-5000+2 CVEs60
0patch releases unofficial patches for Windows 0days exploited in the wildSecurity Affairs·Mar 27, 17:52 UTC · Mar 27, 2020Exploit / PoC in the wild60
Drupal addressed the critical CVE-2018Security Affairs·Mar 29, 12:24 UTC · Mar 29, 2018Exploit / PoCCVE-2018-7600CVE-2014-370460
Google fixes eighth actively exploited Chrome zeroSecurity Affairs·May 24, 13:13 UTC · May 24, 2024Exploit / PoC in the wildCVE-2024-5274CVE-2024-0519CVE-2024-2887+5 CVEs60
Google patches actively exploited Chrome zero-day (CVE‑2025‑6554)Help Net Security·Sep 18, 11:55 UTC · Sep 18, 2025Exploit / PoC in the wildCVE-2025-655460