Critical Microsoft RPC runtime bug: No PoC exploit yet, but patch ASAP! (CVE-2022-26809)Help Net Security·Apr 15, 00:00 UTC · Apr 15, 2022Exploit / PoCCVE-2022-26809160
Microsoft fixes actively exploited zero-day reported by the NSA (CVE-2022-24521)Help Net Security·Apr 12, 00:00 UTC · Apr 12, 2022Exploit / PoC in the wildCVE-2022-24521CVE-2022-26904CVE-2022-26809+2 CVEs60
ThreatsDay Bulletin: $290M DeFi Hack, macOS LotL Abuse, ProxySmart SIM Farms +25 New StoriesThe Hacker News·Apr 24, 04:36 UTC · Apr 24, 2026Exploit / PoCCVE-2026-27175CVE-2026-27174CVE-2025-22952+1 CVEs60
LDAPNightmare PoC Exploit Crashes LSASS and Reboots Windows Domain ControllersThe Hacker News·Jan 8, 13:19 UTC · Jan 8, 2025Exploit / PoCCVE-2024-49113CVE-2024-49112160
Microsoft Issues Security Update Fixing 118 Flaws, Two Actively Exploited in the WildThe Hacker News·Oct 9, 12:48 UTC · Oct 9, 2024Exploit / PoC in the wildCVE-2024-43572CVE-2024-43573CVE-2024-43583+7 CVEs60
Microsoft plugs actively exploited zero-day hole (CVE-2023-21674)Help Net Security·Jan 10, 00:00 UTC · Jan 10, 2023Exploit / PoC in the wildCVE-2023-21674CVE-2023-21549CVE-2023-21743+4 CVEs160
Google hacker found a critical flaw in Blizzard Games that expose millions of PCs to DNS Rebinding attacksSecurity Affairs·Jan 23, 11:10 UTC · Jan 23, 2018Exploit / PoC60
Largest Patch Tuesday since July includes two exploited in the wild, three critical vulnerabilitiesCisco Talos·Oct 8, 19:04 UTC · Oct 8, 2024Exploit / PoC in the wildCVE-2024-43572CVE-2024-43573CVE-2024-43583+10 CVEs60
Microsoft Releases Fix for New ZeroThe Hacker News·May 11, 16:06 UTC · May 11, 2022Exploit / PoC in the wildCVE-2022-26925CVE-2022-29972CVE-2022-22713+14 CVEs60
SandboxEscaper is back with a new Windows ZeroSecurity Affairs·May 22, 08:10 UTC · May 22, 2019Exploit / PoC60
Kaspersky DDoS Intelligence Report for Q4 2015Kaspersky Securelist·Jan 28, 12:00 UTC · Jan 28, 2016Exploit / PoC60
Volexity Uncovers Zero-Day Campaign Targeting SonicWall VPN AppliancesSecurity Affairs·Jul 20, 07:31 UTC · Jul 20, 2026Exploit / PoC in the wildCVE-2026-15409CVE-2026-1541060
FortiBleed Targeted FortiGate Firewalls in 110 MillionThe Hacker News·Jun 25, 05:28 UTC · Jun 25, 2026Exploit / PoC60
U.S. CISA adds Ubiquiti UniFi OS and Lantronix EDS5000 plugin flaws to its Known Exploited Vulnerabilities catalogSecurity Affairs·Jun 24, 10:00 UTC · Jun 24, 2026Exploit / PoC in the wildCVE-2025-67038CVE-2026-34908CVE-2026-34909+1 CVEs60
U.S. CISA adds Microsoft and Adobe flaws to its Known Exploited Vulnerabilities catalogSecurity Affairs·May 21, 20:27 UTC · May 21, 2026Exploit / PoC in the wildCVE-2008-4250CVE-2009-1537CVE-2009-3459+4 CVEs60
Coruna framework: an exploit kit and ties to Operation TriangulationKaspersky Securelist·Mar 26, 08:00 UTC · Mar 26, 2026Exploit / PoCCVE-2023-32434CVE-2023-3860660
⚡ Weekly Recap: Proxy Botnet, Office Zero-Day, MongoDB Ransoms, AI Hijacks & New ThreatsThe Hacker News·Feb 15, 00:00 UTC · Feb 15, 2026Exploit / PoC in the wildCVE-2026-21509CVE-2026-1281CVE-2026-134060
China-linked APT UAT-8837 targets North American critical infrastructureSecurity Affairs·Jan 17, 15:50 UTC · Jan 17, 2026Exploit / PoCCVE-2025-5369060
Chinese hackers exploiting React2Shell bug impacting countless websites, Amazon researchers sayThe Record·Dec 5, 16:22 UTC · Dec 5, 2025Exploit / PoC in the wildCVE-2025-5518260
Dahua Camera flaws allow remote hacking. Update firmware nowSecurity Affairs·Jul 31, 05:55 UTC · Jul 31, 2025Exploit / PoCCVE-2025-31700CVE-2025-3170160
UAT-5918 targets critical infrastructure entities in TaiwanCisco Talos·Mar 20, 10:00 UTC · Mar 20, 2025Exploit / PoC60
Microsoft fixes exploited zero-day (CVE-2024-49138)Help Net Security·Dec 10, 00:00 UTC · Dec 10, 2024Exploit / PoC in the wildCVE-2024-49138CVE-2024-49112CVE-2024-49114+1 CVEs160
Microsoft fixes actively exploited zero-days (CVE-2024-43451, CVE-2024-49039)Help Net Security·Nov 26, 13:25 UTC · Nov 26, 2024Exploit / PoC in the wildCVE-2024-43451CVE-2024-49039CVE-2024-43639+3 CVEs60
Microsoft Fixes 90 New Flaws, Including Actively Exploited NTLM and Task Scheduler BugsThe Hacker News·Nov 15, 00:00 UTC · Nov 15, 2024Exploit / PoC in the wildCVE-2024-43451CVE-2024-49039CVE-2024-21410+6 CVEs260
Experts created a PoC for Apache OFBiz flaw CVE-2023Security Affairs·Jan 12, 12:07 UTC · Jan 12, 2024Exploit / PoCCVE-2023-51467CVE-2023-49070CVE-2020-9496+1 CVEs60
Critical Zero-Day in Apache OfBiz ERP System Exposes Businesses to AttackThe Hacker News·Jan 9, 06:04 UTC · Jan 9, 2024Exploit / PoC in the wildCVE-2023-51467CVE-2023-4907060
Experts warn of critical ZeroSecurity Affairs·Dec 28, 08:52 UTC · Dec 28, 2023Exploit / PoCCVE-2023-51467CVE-2023-4907060
January 2021 Patch Tuesday: Microsoft plugs Defender zero-day RCEHelp Net Security·Nov 14, 08:33 UTC · Nov 14, 2023Exploit / PoC in the wildCVE-2021-1647CVE-2021-1648CVE-2021-1658+8 CVEs60
The federal government’s cybersecurity policies are falling into place just in time to be stalled againCisco Talos·Jul 20, 18:00 UTC · Jul 20, 2023Exploit / PoC in the wildCVE-2023-3745060
Microsoft fixes many zero-days under attackHelp Net Security·Nov 8, 00:00 UTC · Nov 8, 2022Exploit / PoC in the wildCVE-2022-41091CVE-2022-41049CVE-2022-41128+3 CVEs60
Microsoft fixes exploited zero-day in Windows CSRSS (CVE-2022-22047)Help Net Security·Jul 12, 00:00 UTC · Jul 12, 2022Exploit / PoC in the wildCVE-2022-22047CVE-2022-30216CVE-2022-22029+1 CVEs160
Threat actors target the infoSec community with fake PoC exploitsSecurity Affairs·May 23, 18:21 UTC · May 23, 2022Exploit / PoCCVE-2022-26809CVE-2022-2450060
Week in review: Attackers exploiting VMware RCE, Microsoft fixes actively exploited zero-dayHelp Net Security·Apr 17, 00:00 UTC · Apr 17, 2022Exploit / PoC in the wildCVE-2022-24521CVE-2022-26904CVE-2022-26809+1 CVEs60
A zero-day in Windows 7 and Windows Server 2008 has yet to be fixedSecurity Affairs·Nov 26, 12:02 UTC · Nov 26, 2020Exploit / PoC60
Operation PowerFall: CVE-2020Kaspersky Securelist·Sep 2, 10:00 UTC · Sep 2, 2020Exploit / PoCCVE-2020-098660
Microsoft Reveals New Innocent Ways Windows Users Can Get HackedThe Hacker News·Aug 12, 12:35 UTC · Aug 12, 2020Exploit / PoC in the wildCVE-2020-1380CVE-2020-1464CVE-2020-147260
PoC Exploit For Unpatched Windows 10 ZeroThe Hacker News·May 22, 06:46 UTC · May 22, 2019Exploit / PoC60
0x20k of Ghost Squad released ODay Exploit Targeting Apache HadoopSecurity Affairs·Nov 1, 14:34 UTC · Nov 1, 2018Exploit / PoC60
Critical Flaw in All Blizzard Games Could Let Hackers Hijack Millions of PCsThe Hacker News·Jan 23, 08:35 UTC · Jan 23, 2018Exploit / PoC60