Search: “JavaScript downloaders”

80 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Exploit / PoC 107 Vulnerability 80 Ransomware 72 Malware 52 Threat actor 44 Data breach 24 Phishing & fraud 6 Advisory 2 Research 1 AI safety & security 1

SeverityAll critical 308 high 73 medium 7 low 0 info 1

⚡ Weekly Recap: AI-Powered Phishing, Android Spying Tool, Linux Exploit, GitHub RCE & More

The Hacker NewsMay 5, 05:41 UTC · May 5, 2026Vulnerability in the wildCVE-2026-41940 CVE-2026-31431 CVE-2026-3854+2 CVEs1

60

Week in review: Spring4Shell vulnerability, attackers exploiting patched RCE in Sophos Firewall

Help Net SecurityApr 3, 00:00 UTC · Apr 3, 2022Vulnerability in the wildCVE-2022-1040

60

CISA adds recently disclosed Zimbra bug to its Exploited Vulnerabilities Catalog

The Hacker NewsMar 1, 04:37 UTC · Mar 1, 2022Vulnerability in the wildCVE-2022-24682 CVE-2017-8570 CVE-2017-0222+1 CVEs

60

Roundcube XSS flaw exploited to steal credentials, email (CVE-2024-37383)

Help Net SecurityOct 22, 00:00 UTC · Oct 22, 2024Vulnerability CVE-2024-37383

60

5 Threats That Reshaped Web Security This Year [2025]

The Hacker NewsDec 4, 11:30 UTC · Dec 4, 2025Vulnerability CVE-2025-54135 CVE-2025-53109 CVE-2025-55284

60

Unpatched CCTV Cameras Exploited to Spread Mirai Variant

Infosecurity MagazineAug 29, 15:00 UTC · Aug 29, 2024Vulnerability in the wildCVE-2024-7029 CVE-2014-8361 CVE-2017-17215

60

Rocke: The Champion of Monero Miners

Cisco TalosAug 30, 15:26 UTC · Aug 30, 2018Vulnerability CVE-2017-10271 CVE-2017-3066

60

Critical vm2 sandbox escape flaw uncovered, patch ASAP! (CVE-2022-36067)

Help Net SecurityApr 24, 13:36 UTC · Apr 24, 2023Vulnerability CVE-2022-36067

60

Unofficial Patch Released for New Actively Exploited Windows MotW Vulnerability

The Hacker NewsNov 1, 11:03 UTC · Nov 1, 2022Vulnerability in the wild

60

Flaws in Popular IDE Extensions Allow Data Exfiltration

Infosecurity MagazineFeb 19, 10:45 UTC · Feb 19, 2026Vulnerability CVE-2025-65717 CVE-2025-65716 CVE-2025-65715

60

Critical Bug Reported in NPM Package With Millions of Downloads Weekly

The Hacker NewsSep 15, 00:00 UTC · Sep 15, 2021Vulnerability CVE-2021-23406

60

Spam report: June 2010

Kaspersky SecurelistJul 21, 17:08 UTC · Jul 21, 2010Vulnerability in the wild

60

Ghost CMS CVE-2026-26980 Exploited to Hijack 700+ Sites for ClickFix Attacks

The Hacker NewsJun 26, 07:33 UTC · Jun 26, 2026Vulnerability CVE-2026-26980

60

Popular NPM package Pac

Security AffairsSep 14, 04:33 UTC · Sep 14, 2021Vulnerability CVE-2021-23406

60

CERT/CC Warns binary-parser Bug Allows Node.js Privilege

The Hacker NewsJan 27, 14:10 UTC · Jan 27, 2026Vulnerability CVE-2026-12451

60

cPanel CVE-2026-41940 Under Active Exploitation to Deploy Filemanager Backdoor

The Hacker NewsMay 15, 00:00 UTC · May 15, 2026Vulnerability in the wildCVE-2026-419401

60

New Exploit Targeting Java Vulnerability Found in BlackHole Arsenal

Kaspersky SecurelistDec 13, 13:48 UTC · Dec 13, 2011Vulnerability CVE-2011-3544 CVE-2010-0188

60

December 2022 Patch Tuesday: Get Latest Security Updates from Microsoft and More

The Hacker NewsDec 15, 00:00 UTC · Dec 15, 2022Vulnerability in the wildCVE-2022-44698 CVE-2022-41091 CVE-2022-44710+4 CVEs

60

Critical React Native CLI Flaw Exposed Millions of Developers to Remote Attacks

The Hacker NewsNov 4, 14:24 UTC · Nov 4, 2025Vulnerability CVE-2025-11953

60

2017 Vulnerability Report: A Shift in Cybercriminal Preferences

Recorded FutureAug 11, 00:00 UTC · Aug 11, 2025Vulnerability CVE-2016-0189 CVE-2015-7645 CVE-2015-2444

60

New Kit, Same Player: Top 10 Vulnerabilities Used by Exploit Kits in 2016

Recorded FutureJun 27, 00:00 UTC · Jun 27, 2025Vulnerability CVE-2015-2419 CVE-2015-1671 CVE-2015-0313+2 CVEs

60

9 vulnerabilities found in VPN software, including 1 critical issue that could lead to remote code execution

Cisco TalosOct 25, 16:00 UTC · Oct 25, 2023Vulnerability CVE-2023-22325 CVE-2023-23581 CVE-2023-22308+16 CVEs

60

Researchers Find Serious AI Bugs Exposing Meta, Nvidia, and Microsoft Inference Frameworks

The Hacker NewsNov 15, 00:00 UTC · Nov 15, 2025Vulnerability CVE-2024-50050 CVE-2025-30165 CVE-2025-23254+1 CVEs

60

VS Code extensions with 125M+ installs expose users to cyberattacks

Security AffairsFeb 18, 15:14 UTC · Feb 18, 2026Vulnerability CVE-2025-65715 CVE-2025-65716 CVE-2025-657171

60

Hackers Exploited ColdFusion Vulnerability to Breach Federal Agency Servers

The Hacker NewsDec 9, 05:09 UTC · Dec 9, 2023Vulnerability in the wildCVE-2023-26360

60

node-ipc NPM Package sabotage to protest Ukraine invasion

Security AffairsMar 18, 00:16 UTC · Mar 18, 2022Vulnerability CVE-2022-23812

60

US Agencies Warn of Laundry Bear Campaign Targeting Unpatched Zimbra Servers

Security AffairsJul 24, 08:31 UTC · Jul 24, 2026Vulnerability in the wildCVE-2025-66376

60

Week in review: cPanel vulnerability actively exploited, DigiCert breach, LinkedIn job scams

Help Net SecurityMay 10, 00:00 UTC · May 10, 2026Vulnerability in the wildCVE-2026-41940 CVE-2026-4670 CVE-2026-5174+4 CVEs

60

Microsoft Patch Tuesday

Cisco TalosDec 12, 23:32 UTC · Dec 12, 2017Vulnerability in the wildCVE-2017-11886 CVE-2017-11888 CVE-2017-11889+31 CVEs

60

iframe Security Exposed: The Blind Spot Fueling Payment Skimmer Attacks

The Hacker NewsSep 24, 11:03 UTC · Sep 24, 2025Vulnerability in the wild

60

600+ installs of WordPress Cookie Consent Plugin vulnerable. Fix it now!

Security AffairsFeb 13, 11:01 UTC · Feb 13, 2020Vulnerability CVE-2020-8417

60

Lazarus Group Exploits Google Chrome Vulnerability to Control Infected Devices

The Hacker NewsNov 4, 05:56 UTC · Nov 4, 2024Vulnerability CVE-2024-4947

60

Attackers actively exploiting flaw(s) in Cleo file transfer software (CVE-2024-50623)

Help Net SecurityJun 8, 10:32 UTC · Jun 8, 2026Vulnerability in the wildCVE-2024-50623

60

Microsoft Issues Emergency Patch For Critical RCE in Windows Malware Scanner

The Hacker NewsMay 9, 07:58 UTC · May 9, 2017Vulnerability CVE-2017-0290

60

iOS Update Available

Kaspersky SecurelistNov 15, 16:51 UTC · Nov 15, 2013Vulnerability in the wildCVE-2013-5193

60

Ivanti Connect Secure zero-days exploited by attackers (CVE-2023-46805, CVE-2024-21887)

Help Net SecurityJan 16, 16:05 UTC · Jan 16, 2024Vulnerability in the wildCVE-2023-46805 CVE-2024-21887

60

Cisco FMC flaw was exploited by Interlock weeks before patch (CVE-2026-20131)

Help Net SecurityMar 20, 00:00 UTC · Mar 20, 2026Vulnerability CVE-2026-20131 CVE-2026-20127 CVE-2026-20045+1 CVEs

60

Google Warns of Active Exploitation of WinRAR Vulnerability CVE-2025

The Hacker NewsJan 29, 06:06 UTC · Jan 29, 2026Vulnerability in the wildCVE-2025-8088 CVE-2025-6218

60

Researchers raise alarm about critical Next.js vulnerability

CyberScoopMar 24, 21:26 UTC · Mar 24, 2025Vulnerability CVE-2025-29927

60

Critical flaws in NextGen Gallery WordPress plugin still impact over 500K installs

Security AffairsFeb 9, 15:18 UTC · Feb 9, 2021Vulnerability CVE-2020-35942

60