Microsoft Uncovers Critical Flaws in Rockwell Automation PanelView PlusThe Hacker News·Jul 5, 03:27 UTC · Jul 5, 2024VulnerabilityCVE-2023-2071CVE-2023-29464CVE-2024-2369260
Russia-Aligned TAG-110 Targets Asia and Europe with HATVIBE and CHERRYSPYRecorded Future·Aug 22, 00:00 UTC · Aug 22, 2025VulnerabilityCVE-2024-2369260
Apache patch a zeroSecurity Affairs·Oct 5, 17:15 UTC · Oct 5, 2021Vulnerability in the wildCVE-2021-41773CVE-2021-4152460
CISA Confirms Exploitation of SonicWall VulnerabilitiesInfosecurity Magazine·May 2, 15:00 UTC · May 2, 2025Vulnerability in the wildCVE-2023-44221CVE-2024-3847560
Critical Boot Loader Vulnerability in Shim Impacts Nearly All Linux DistrosThe Hacker News·Feb 8, 03:11 UTC · Feb 8, 2024VulnerabilityCVE-2023-40547CVE-2023-40546CVE-2023-40548+3 CVEs60
Expert published NMAP script for Apache CVE-2021Security Affairs·Oct 9, 12:04 UTC · Oct 9, 2021Vulnerability in the wildCVE-2021-41773CVE-2021-42013160
Apache rolled out a new update in a few days to fix incomplete patch for actively exploited flawSecurity Affairs·Oct 8, 07:38 UTC · Oct 8, 2021Vulnerability in the wildCVE-2021-41773CVE-2021-4201360
PSA: Conference Invite used as a Lure by Operation Lotus Blossom ActorsPalo Alto Unit 42·Nov 1, 10:25 UTC · Nov 1, 2018VulnerabilityCVE-2012-015860
Critical Flaws Found in Four VS Code Extensions with Over 125 Million InstallsThe Hacker News·Feb 18, 13:16 UTC · Feb 18, 2026VulnerabilityCVE-2025-65717CVE-2025-65716CVE-2025-65715160
Attackers exploited old flaws to breach SonicWall SMA appliances (CVE-2024-38475, CVE-2023-44221)Help Net Security·May 2, 00:00 UTC · May 2, 2025Vulnerability in the wildCVE-2024-38475CVE-2023-4422160
China-linked APT UAT-9686 abused now patched maximum severity AsyncOS bugSecurity Affairs·Jan 16, 10:17 UTC · Jan 16, 2026Vulnerability in the wildCVE-2025-2039360
Critical ASP.NET flaw hits QNAP NetBak PC AgentSecurity Affairs·Oct 28, 12:23 UTC · Oct 28, 2025VulnerabilityCVE-2025-5531560
New infostealer reaches enterprise devices through FortiClient EMS vulnerabilityHelp Net Security·May 29, 00:00 UTC · May 29, 2026VulnerabilityCVE-2026-3561660
Vulnerability Spotlight: Multiple remote vulnerabilities in TP-Link TLCisco Talos·Nov 19, 14:30 UTC · Nov 19, 2018VulnerabilityCVE-2018-3948CVE-2018-3949CVE-2018-3950+1 CVEs60
Apache Tomcat Patches Important Remote Code Execution FlawThe Hacker News·Oct 5, 11:16 UTC · Oct 5, 2017VulnerabilityCVE-2017-12617CVE-2017-12615260
Actor Exploits Microsoft Exchange Server Vulnerabilities, Cortex XDR Blocks Harvesting of CredentialsPalo Alto Unit 42·Jun 6, 13:23 UTC · Jun 6, 2024Vulnerability in the wildCVE-2021-26855CVE-2021-26857CVE-2021-26858+1 CVEs60
Network Security Trends: Recent Exploits Observed in the Wild Include Remote Code Execution, CrossPalo Alto Unit 42·Jun 5, 20:05 UTC · Jun 5, 2024Vulnerability in the wildCVE-2022-22954CVE-2022-22963CVE-2022-22965+20 CVEs60
QNAP SOHO NAS devices affected by unpatched RCE vulnerabilitiesSecurity Affairs·Apr 2, 17:29 UTC · Apr 2, 2021Vulnerability55
Cisco Patches CVE-2026-20230 in Unified CM as Exploit Code Goes PublicThe Hacker News·Jun 4, 16:55 UTC · Jun 4, 2026Vulnerability in the wildCVE-2026-20230CVE-2025-20309CVE-2026-2004560
Patch Tuesday, June 2025 EditionKrebs on Security·Jun 11, 02:03 UTC · Jun 11, 2025Vulnerability in the wildCVE-2025-33053CVE-2025-33073CVE-2025-5419+1 CVEs60
New Patch Released for Actively Exploited 0The Hacker News·Oct 11, 02:57 UTC · Oct 11, 2021Vulnerability in the wildCVE-2021-42013CVE-2021-4177360
Attackers exploit critical Adobe ColdFusion vulnerability (CVE-2026-48282)Help Net Security·Jul 7, 00:00 UTC · Jul 7, 2026Vulnerability in the wildCVE-2026-4828260
Ollama Out-of-Bounds Read Vulnerability Allows Remote Process Memory LeakThe Hacker News·May 11, 18:23 UTC · May 11, 2026VulnerabilityCVE-2026-7482CVE-2026-42248CVE-2026-4224960
Attackers use MS Teams, fake mailbox repair utility to breach organizationsHelp Net Security·Apr 27, 00:00 UTC · Apr 27, 2026Vulnerability55
Critical RCE Vulnerability Discovered in Ollama AI Infrastructure ToolThe Hacker News·Jun 25, 03:22 UTC · Jun 25, 2024VulnerabilityCVE-2024-37032CVE-2024-2247660
Oracle PeopleSoft RCE Flaw Used as ZeroSecurity Affairs·Jun 12, 10:49 UTC · Jun 12, 2026VulnerabilityCVE-2026-35273160
New Exploit for MikroTik Router WinBox Vulnerability Gives Full Root AccessThe Hacker News·Oct 8, 15:34 UTC · Oct 8, 2018VulnerabilityCVE-2018-14847CVE-2018-1156CVE-2018-1157+2 CVEs60
CVE-2022-30190 (Follina) vulnerability in MSDT: description and counteractionKaspersky Securelist·Jun 6, 08:00 UTC · Jun 6, 2022Vulnerability in the wildCVE-2022-30190CVE-2017-0199CVE-2021-4044460
Critical AdonisJS Bodyparser Flaw (CVSS 9.2) Enables Arbitrary File Write on ServersThe Hacker News·Jan 8, 04:45 UTC · Jan 8, 2026VulnerabilityCVE-2026-21440CVE-2025-6842860
Quest KACE SMA flaw CVE-2025-32975: when one unpatched tool opens the door to 60 organizationsSecurity Affairs·May 13, 13:25 UTC · May 13, 2026VulnerabilityCVE-2025-3297560
Other Sierra AirLink router models affected by critical flawsSecurity Affairs·May 6, 12:48 UTC · May 6, 2019VulnerabilityCVE-2018-4061CVE-2018-4063CVE-2018-4066+4 CVEs60
January 2026 CVE Landscape: 23 Critical Vulnerabilities Mark 5% Increase, APT28 Exploits Microsoft Office ZeroRecorded Future·Feb 24, 00:00 UTC · Feb 24, 2026Vulnerability in the wildCVE-2026-21509CVE-2026-23760CVE-2026-1281+1 CVEs160
From LFI to RCE: Active Exploitation Detected in Gladinet and TrioFox VulnerabilityThe Hacker News·Oct 15, 00:00 UTC · Oct 15, 2025Vulnerability in the wildCVE-2025-11371CVE-2025-3040660
CVE-2021-44228 vulnerability in Apache Log4j libraryKaspersky Securelist·Dec 13, 14:10 UTC · Dec 13, 2021Vulnerability in the wildCVE-2021-44228CVE-2021-4504660
Critical vulnerabilities in TeamCity JetBrains fixed, release of technical details imminent, patch quickly! (CVE-2024-27198, CVE-2024-27199)Help Net Security·Mar 7, 09:16 UTC · Mar 7, 2024VulnerabilityCVE-2024-27198CVE-2024-2719960
55 New Security Flaws Reported in Apple Software and ServicesThe Hacker News·Oct 9, 09:06 UTC · Oct 9, 2020Vulnerability55
Critical Cisco Unified CM Bug Patched as Public Exploit Code EmergesSecurity Affairs·Jun 4, 13:12 UTC · Jun 4, 2026VulnerabilityCVE-2026-2023060
Critical Langflow Flaw CVE-2026-33017 Triggers Attacks within 20 Hours of DisclosureThe Hacker News·Mar 26, 06:26 UTC · Mar 26, 2026Vulnerability in the wildCVE-2026-33017CVE-2025-3248160
Researchers Uncover Active Exploitation of WordPress Plugin VulnerabilitiesThe Hacker News·May 30, 13:49 UTC · May 30, 2024Vulnerability in the wildCVE-2023-6961CVE-2023-40000CVE-2024-219460
Popular NPM package PacSecurity Affairs·Sep 14, 04:33 UTC · Sep 14, 2021VulnerabilityCVE-2021-2340660