Search: “http”

636 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 1292 Malware 1221 Exploit / PoC 629 Ransomware 337 Threat actor 273 Data breach 170 Phishing & fraud 98 Industry 92 Policy & legal 50 Advisory 49 AI tools & infra 42 Research 32 Tools 28 AI safety & security 28

SeverityAll critical 1577 high 1384 medium 1041 low 265 info 91

HAProxy Found Vulnerable to Critical HTTP Request Smuggling Attack

The Hacker NewsSep 8, 12:33 UTC · Sep 8, 2021Vulnerability CVE-2021-40346

60

3 iOS 0-days, a cellular network compromise, and HTTP used to infect an iPhone

Ars Technica · SecuritySep 23, 00:23 UTC · Sep 23, 2023Vulnerability CVE-2023-41993 CVE-2023-41991 CVE-2023-41992+1 CVEs

60

Active exploitation of Cisco IOS XE Software Web Management User Interface vulnerabilities

Cisco TalosOct 16, 15:05 UTC · Oct 16, 2023Vulnerability in the wildCVE-2023-20198 CVE-2023-20273 CVE-2021-14351

60

New Cache Poisoning Attack Lets Attackers Target CDN Protected Sites

The Hacker NewsOct 24, 05:34 UTC · Oct 24, 2019Vulnerability CVE-2019-0941

60

Unmasking the new persistent attacks on Japan

Cisco TalosMar 6, 11:00 UTC · Mar 6, 2025Vulnerability CVE-2024-45771

60

Vulnerability Spotlight: Multiple remote vulnerabilities in TP-Link TL

Cisco TalosNov 19, 14:30 UTC · Nov 19, 2018Vulnerability CVE-2018-3948 CVE-2018-3949 CVE-2018-3950+1 CVEs

60

Know Your Infusion Pump Vulnerabilities and Secure Your Healthcare Organization

Palo Alto Unit 42Jun 5, 23:27 UTC · Jun 5, 2024Vulnerability CVE-2019-12255 CVE-2019-12264 CVE-2016-9355+7 CVEs1

60

More than 2 million Apache HTTP servers affected by CVE-2019

Security AffairsApr 5, 07:51 UTC · Apr 5, 2019Vulnerability CVE-2019-0211

60

QNAP Advises Users to Update NAS Firmware to Patch Apache HTTP Vulnerabilities

The Hacker NewsApr 22, 08:15 UTC · Apr 22, 2022Vulnerability CVE-2022-22721 CVE-2022-23943 CVE-2022-22719+3 CVEs

60

18-Year-Old NGINX Rewrite Module Flaw Enables Unauthenticated RCE

The Hacker NewsMay 21, 07:24 UTC · May 21, 2026Vulnerability CVE-2026-42945 CVE-2026-42946 CVE-2026-40701+1 CVEs

60

Now-Patched Fortinet FortiWeb Flaw Exploited in Attacks to Create Admin Accounts

The Hacker NewsNov 17, 14:23 UTC · Nov 17, 2025Vulnerability in the wildCVE-2025-64446

60

CVE-2026-42533: Critical NGINX Bug Could Turn HTTP Requests Into Server Takeovers

Security AffairsJul 20, 09:50 UTC · Jul 20, 2026Vulnerability CVE-2026-42533

60

Fuzzing µC/OS protocol stacks, Part 1: HTTP server fuzzing

Cisco TalosAug 28, 16:00 UTC · Aug 28, 2024Vulnerability

55

Apache fixed a source code disclosure flaw in Apache HTTP Server

Security AffairsJul 7, 17:20 UTC · Jul 7, 2024Vulnerability CVE-2024-39884

60

Apache rolled out a new update in a few days to fix incomplete patch for actively exploited flaw

Security AffairsOct 8, 07:38 UTC · Oct 8, 2021Vulnerability in the wildCVE-2021-41773 CVE-2021-42013

60

CVE-2021-31166 Windows HTTP flaw also impacts WinRM servers

Security AffairsMay 23, 13:25 UTC · May 23, 2021Vulnerability in the wildCVE-2021-31166

60

Critical flaw in Jenkins Server can cause information disclosure

Security AffairsAug 18, 17:55 UTC · Aug 18, 2020Vulnerability CVE-2019-17638

60

Veeam, Terraform MCP, Django Patch Critical Flaws, Led by CVSS 10.0 Cross

The Hacker NewsAug 5, 14:27 UTC · Aug 5, 2026Vulnerability in the wildCVE-2026-58073 CVE-2026-58072 CVE-2026-58067+10 CVEs1

60

Critical ASP.NET flaw hits QNAP NetBak PC Agent

Security AffairsOct 28, 12:23 UTC · Oct 28, 2025Vulnerability CVE-2025-55315

60

ASUS Patches DriverHub RCE Flaws Exploitable via HTTP and Crafted .ini Files

The Hacker NewsMay 12, 14:03 UTC · May 12, 2025Vulnerability in the wildCVE-2025-3462 CVE-2025-3463

60

THOR: Previously Unseen PlugX Variant Deployed During Microsoft Exchange Server Attacks by PKPLUG Group

Palo Alto Unit 42Jun 6, 12:19 UTC · Jun 6, 2024Vulnerability CVE-2021-26855 CVE-2021-27065

60

Demystifying Kubernetes CVE-2018

Palo Alto Unit 42Jan 28, 20:53 UTC · Jan 28, 2022Vulnerability CVE-2018-1002105

60

Patch Apache HTTP Servers Now to Avoid Zero Day Exploit

Infosecurity MagazineOct 6, 09:16 UTC · Oct 6, 2021Vulnerability in the wildCVE-2021-41773 CVE-2021-41524

60

Critical RCE Flaw in Linux APT Allows Remote Attackers to Hack Systems

The Hacker NewsJan 23, 08:19 UTC · Jan 23, 2019Vulnerability CVE-2019-3462

60

Vulnerability Spotlight: Multiple Vulnerabilities in Moxa EDR

Cisco TalosApr 13, 15:57 UTC · Apr 13, 2018Vulnerability CVE-2017-12120 CVE-2017-12121 CVE-2017-12123+8 CVEs

60

Firefox 51 starts flagging HTTP login pages as insecure

Help Net SecurityJan 25, 00:00 UTC · Jan 25, 2017Vulnerability

55

Critical Gitea Docker Bug Under Active Exploitation Exposes Repositories and Secrets

Security AffairsJul 7, 21:16 UTC · Jul 7, 2026Vulnerability in the wildCVE-2026-208961

60

⚡ Weekly Recap: Apple 0-Days, WinRAR Exploit, LastPass Fines, .NET RCE, OAuth Scams & More

The Hacker NewsDec 15, 00:00 UTC · Dec 15, 2025Vulnerability in the wildCVE-2025-14174 CVE-2025-43529 CVE-2025-6218+43 CVEs

60

Critical RSC Bugs in React and Next.js Allow Unauthenticated Remote Code Execution

The Hacker NewsDec 4, 15:38 UTC · Dec 4, 2025Vulnerability CVE-2025-55182 CVE-2025-66478

60

CISA Confirms Exploitation of SonicWall Vulnerabilities

Infosecurity MagazineMay 2, 15:00 UTC · May 2, 2025Vulnerability in the wildCVE-2023-44221 CVE-2024-38475

60

Critical RCE Flaw in GFI KerioControl Allows Remote Code Execution via CRLF Injection

The Hacker NewsJan 9, 10:29 UTC · Jan 9, 2025Vulnerability in the wildCVE-2024-52875

60

Personal VPN and Its Evasions: Risk Factors and How to Maintain Network Visibility

Palo Alto Unit 42Jun 6, 12:16 UTC · Jun 6, 2024Vulnerability CVE-2020-15590 CVE-2019-12579 CVE-2019-12578+23 CVEs

60

Critical Boot Loader Vulnerability in Shim Impacts Nearly All Linux Distros

The Hacker NewsFeb 8, 03:11 UTC · Feb 8, 2024Vulnerability CVE-2023-40547 CVE-2023-40546 CVE-2023-40548+3 CVEs

60

Biggest DDoSes of all time generated by protocol 0

Ars Technica · SecurityOct 15, 00:00 UTC · Oct 15, 2023Vulnerability

55

Expert published NMAP script for Apache CVE-2021

Security AffairsOct 9, 12:04 UTC · Oct 9, 2021Vulnerability in the wildCVE-2021-41773 CVE-2021-420131

60

Critical Jenkins Server Vulnerability Could Leak Sensitive Information

The Hacker NewsAug 21, 13:46 UTC · Aug 21, 2020Vulnerability CVE-2019-17638

60

Juniper Networks addressed many issues in its products

Security AffairsJul 10, 18:04 UTC · Jul 10, 2020Vulnerability CVE-2020-1647 CVE-2020-1654

60

F5 Patches Critical NGINX Vulnerabilities Enabling Unauthenticated Code Execution

Security AffairsJun 18, 14:07 UTC · Jun 18, 2026Vulnerability CVE-2026-42530 CVE-2026-42055 CVE-2026-11311+1 CVEs

60

Actively Exploited nginx-ui Flaw (CVE-2026-33032) Enables Full Nginx Server Takeover

The Hacker NewsApr 15, 00:00 UTC · Apr 15, 2026Vulnerability in the wildCVE-2026-33032 CVE-2026-27944 CVE-2026-27825+1 CVEs

60

China-linked APT UAT-9686 abused now patched maximum severity AsyncOS bug

Security AffairsJan 16, 10:17 UTC · Jan 16, 2026Vulnerability in the wildCVE-2025-20393

60