Search: “middleware”

60 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 80 Exploit / PoC 28 Industry 16 Data breach 11 Ransomware 11 Malware 9 Policy & legal 8 AI tools & infra 8 Phishing & fraud 8 Advisory 7 Research 5 AI safety & security 5 AI industry 3 Threat actor 3

SeverityAll critical 106 high 30 medium 29 low 26 info 16

Attackers can bypass middleware auth checks by exploiting critical Next.js flaw

Security AffairsMar 24, 11:22 UTC · Mar 24, 2025Vulnerability CVE-2025-29927

60

Critical Next.js auth bypass vulnerability opens web apps to compromise (CVE-2025-29927)

Help Net SecurityApr 2, 08:44 UTC · Apr 2, 2025Vulnerability in the wildCVE-2025-29927

60

Critical Next.js Vulnerability Allows Attackers to Bypass Middleware Authorization Checks

The Hacker NewsMar 25, 03:16 UTC · Mar 25, 2025Vulnerability CVE-2025-29927

60

NCSC Urges Users to Patch Next.js Flaw Immediately

Infosecurity MagazineMar 31, 10:15 UTC · Mar 31, 2025Vulnerability CVE-2025-29927

60

Oracle spent 6 months to fix 'Mega' flaws in the Fusion Middleware

Security AffairsJun 25, 20:08 UTC · Jun 25, 2022Vulnerability

55

CISA Warns of Actively Exploited Critical Oracle Fusion Middleware Vulnerability

The Hacker NewsNov 29, 08:07 UTC · Nov 29, 2022Vulnerability in the wildCVE-2021-35587 CVE-2022-4135

60

Researchers raise alarm about critical Next.js vulnerability

CyberScoopMar 24, 21:26 UTC · Mar 24, 2025Vulnerability CVE-2025-29927

60

Actively exploited critical flaw in Modular DS WordPress plugin enables admin takeover

Security AffairsJan 16, 08:26 UTC · Jan 16, 2026Vulnerability in the wildCVE-2026-23550

60

RCE flaw in Ministra IPTV Platform exposes user data and more

Security AffairsJun 6, 14:11 UTC · Jun 6, 2019Vulnerability

55

CVE-2026-33032: severe nginx-ui bug grants unauthenticated server access

Security AffairsApr 15, 18:17 UTC · Apr 15, 2026Vulnerability in the wildCVE-2026-33032

60

Actively Exploited nginx-ui Flaw (CVE-2026-33032) Enables Full Nginx Server Takeover

The Hacker NewsApr 15, 00:00 UTC · Apr 15, 2026Vulnerability in the wildCVE-2026-33032 CVE-2026-27944 CVE-2026-27825+1 CVEs

60

Rack Ruby vulnerability could reveal secrets to attackers (CVE-2025-27610)

Help Net SecurityApr 25, 00:00 UTC · Apr 25, 2025Vulnerability CVE-2025-27610 CVE-2025-25184 CVE-2025-27111

60

Critical Flaws Found in Widely Used IPTV Software for Online Streaming Services

The Hacker NewsJun 6, 09:54 UTC · Jun 6, 2019Vulnerability

55

Oracle CPU October 2018: 301 vulnerabilities patched

Help Net SecurityOct 17, 00:00 UTC · Oct 17, 2018Vulnerability CVE-2018-2913

60

Oracle issues emergency patches for JOLTANDBLEED flaws

Security AffairsNov 17, 11:19 UTC · Nov 17, 2017Vulnerability CVE-2017-10272 CVE-2017-10267 CVE-2017-10278+2 CVEs

60

Oracle issues an emergency patch for a bug in Oracle Identity Manager, apply it now!

Security AffairsNov 1, 10:07 UTC · Nov 1, 2017Vulnerability CVE-2017-10151

60

Highly Critical Flaw (CVSS Score 10) Lets Hackers Hijack Oracle Identity Manager

The Hacker NewsOct 31, 08:01 UTC · Oct 31, 2017Vulnerability CVE-2017-10151

60

Oracle releases emergency Oracle Identity Manager patch

Help Net SecurityOct 31, 00:00 UTC · Oct 31, 2017Vulnerability in the wildCVE-2017-10151

60

Veeam, Terraform MCP, Django Patch Critical Flaws, Led by CVSS 10.0 Cross

The Hacker NewsAug 5, 14:27 UTC · Aug 5, 2026Vulnerability in the wildCVE-2026-58073 CVE-2026-58072 CVE-2026-58067+10 CVEs1

60

UK Healthcare Sector Records Tenfold Increase in Cyber

Infosecurity MagazineJun 30, 09:30 UTC · Jun 30, 2026Vulnerability

55

Critical Fortinet FortiClient EMS bug under active attack (CVE-2026-21643)

Help Net SecurityJun 24, 10:29 UTC · Jun 24, 2026Vulnerability in the wildCVE-2026-21643

60

⚡ Weekly Recap: Fiber Optic Spying, Windows Rootkit, AI Vulnerability Hunting and More

The Hacker NewsApr 15, 00:00 UTC · Apr 15, 2026Vulnerability in the wildCVE-2026-346212

60

Oracle issues emergency fix for pre-auth RCE in Identity Manager (CVE-2026-21992)

Help Net SecurityMar 23, 00:00 UTC · Mar 23, 2026Vulnerability in the wildCVE-2026-21992 CVE-2025-61757

60

Oracle fixes critical RCE flaw CVE-2026

Security AffairsMar 22, 15:37 UTC · Mar 22, 2026Vulnerability in the wildCVE-2026-21992 CVE-2025-61757

60

Docker Fixes Critical Ask Gordon AI Flaw Allowing Code Execution via Image Metadata

The Hacker NewsFeb 3, 16:41 UTC · Feb 3, 2026Vulnerability1

55

CISA Urges Patch of Actively Exploited Flaw in Oracle Identity Manager

Infosecurity MagazineNov 24, 11:07 UTC · Nov 24, 2025Vulnerability in the wildCVE-2025-61757 CVE-2021-35587

60

Preparing for the Digital Battlefield of 2026: Ghost Identities, Poisoned Accounts, & AI Agent Havoc

The Hacker NewsOct 29, 11:55 UTC · Oct 29, 2025Vulnerability

55

Critical Vulnerability in Salesforce AgentForce Exposed

Infosecurity MagazineSep 25, 17:00 UTC · Sep 25, 2025Vulnerability

55

Hackers deploy DripDropper via Apache ActiveMQ flaw, patch systems to evade detection

Security AffairsAug 21, 16:30 UTC · Aug 21, 2025Vulnerability in the wildCVE-2023-46604

60

The AI security crisis no one is preparing for

Help Net SecurityAug 20, 00:00 UTC · Aug 20, 2025Vulnerability

55

Gold Melody IAB Exploits Exposed ASP.NET Machine Keys for Unauthorized Access to Targets

The Hacker NewsJul 11, 04:04 UTC · Jul 11, 2025Vulnerability

55

Why app modernization can leave you less secure

Help Net SecurityMay 27, 00:00 UTC · May 27, 2025Vulnerability

55

AI hallucinations and their risk to cybersecurity operations

Help Net SecurityMay 19, 00:00 UTC · May 19, 2025Vulnerability

55

Oracle To Address 320 Vulnerabilities in January Patch Update

Infosecurity MagazineJan 21, 12:45 UTC · Jan 21, 2025Vulnerability in the wildCVE-2020-2883

60

Critical RCE Vulnerability Discovered in Ollama AI Infrastructure Tool

The Hacker NewsJun 25, 03:22 UTC · Jun 25, 2024Vulnerability CVE-2024-37032 CVE-2024-22476

60

Why we need to secure IoT connections sooner rather than later

Help Net SecurityJan 23, 13:28 UTC · Jan 23, 2024Vulnerability

55

8220 gang exploits old Oracle WebLogic vulnerability to deliver infostealers, cryptominers

Help Net SecurityDec 20, 00:00 UTC · Dec 20, 2023Vulnerability CVE-2020-14883 CVE-2017-3506 CVE-2020-14882

60

July 2020 Patch Tuesday: Microsoft plugs wormable Windows DNS Server RCE flaw

Help Net SecurityNov 14, 09:19 UTC · Nov 14, 2023Vulnerability in the wildCVE-2020-1350 CVE-2020-1147 CVE-2020-1349+2 CVEs

60

Threat Source newsletter (April 21, 2022) — Sideloading apps is as safe as you make it

Cisco TalosApr 21, 18:00 UTC · Apr 21, 2022Vulnerability

55

Muhstik Botnet Targeting Redis Servers Using Recently Disclosed Vulnerability

The Hacker NewsMar 28, 06:59 UTC · Mar 28, 2022Vulnerability in the wildCVE-2022-0543 CVE-2017-10271 CVE-2018-7600+3 CVEs

60