Millions of Microsoft web servers powered by vulnerable legacy softwareSecurity Affairs·Sep 9, 14:31 UTC · Sep 9, 2021Vulnerability55
Vulnerability Spotlight: Multiple Vulnerabilities in Moxa EDRCisco Talos·Apr 13, 15:57 UTC · Apr 13, 2018VulnerabilityCVE-2017-12120CVE-2017-12121CVE-2017-12123+8 CVEs60
Threat actors exploit discontinues Boa web servers to target critical infrastructureSecurity Affairs·Nov 24, 08:47 UTC · Nov 24, 2022Threat actorCVE-2017-9833CVE-2021-3355860
Critical Flaw in GoAhead Web Server Could Affect Wide Range of IoT DevicesThe Hacker News·Dec 4, 12:48 UTC · Dec 4, 2019VulnerabilityCVE-2019-5096CVE-2019-509760
Talos experts found a critical RCE in GoAhead Web ServerSecurity Affairs·Dec 4, 06:28 UTC · Dec 4, 2019VulnerabilityCVE-2019-5096CVE-2019-5097CVE-2017-1756260
Hackers Exploiting Abandoned Boa Web Servers to Target Critical IndustriesThe Hacker News·Nov 24, 05:54 UTC · Nov 24, 2022VulnerabilityCVE-2017-9833CVE-2021-3355860
Microsoft attributes alleged Chinese attack on Indian power grid to ‘Boa’ IoT vulnerabilityThe Record·Jan 9, 00:00 UTC · Jan 9, 2023VulnerabilityCVE-2021-35395CVE-2022-27255CVE-2017-9833+1 CVEs60
Cyemptive Web Fortress protects web servers against zero-day cyberattacks in real timeHelp Net Security·Feb 18, 00:00 UTC · Feb 18, 2021Exploit / PoC60
New Apache Web Server Bug Threatens Security of Shared Web HostsThe Hacker News·Apr 3, 09:07 UTC · Apr 3, 2019Exploit / PoCCVE-2019-0211CVE-2019-0217CVE-2019-021560
Application security trends: What you need to knowHelp Net Security·Jun 6, 00:00 UTC · Jun 6, 2017Vulnerability55
Critical buffer overflow in CODESYS allows remote code executionSecurity Affairs·Mar 28, 15:37 UTC · Mar 28, 2020VulnerabilityCVE-2020-1024560
Apache fixes actively exploited web server zeroThe Record·Dec 16, 00:00 UTC · Dec 16, 2022Exploit / PoC in the wildCVE-2021-4177360
LightInTheBox exposes unsecured DB containing 1.3TB of web server logsSecurity Affairs·Dec 17, 09:16 UTC · Dec 17, 2019Data breach60
CVE-2019-11043 exposes Web servers using nginx and PHPSecurity Affairs·Oct 26, 15:10 UTC · Oct 26, 2019Vulnerability in the wildCVE-2019-11043160
Web Server Exploits and Mimikatz Used in Attacks Targeting Asian Critical InfrastructureThe Hacker News·Mar 9, 18:22 UTC · Mar 9, 2026Vulnerability55
Google Researcher Reported 3 Flaws in Apache Web Server SoftwareThe Hacker News·Aug 25, 06:52 UTC · Aug 25, 2020Exploit / PoC in the wildCVE-2020-9490CVE-2020-11984CVE-2020-1199360
Hundreds of ICS products affected by a critical flaw in CODESYS WebVisuSecurity Affairs·Feb 2, 15:00 UTC · Feb 2, 2018Exploit / PoC in the wildCVE-2018-544060
⚡ Weekly Recap: Zero-Day Exploits, Developer Malware, IoT Botnets, and AIThe Hacker News·Jan 20, 09:20 UTC · Jan 20, 2026Exploit / PoCCVE-2025-29824CVE-2025-2775CVE-2025-2776+19 CVEs60
New Apache Struts RCE Flaw Lets Hackers Take Over Web ServersThe Hacker News·Aug 23, 18:30 UTC · Aug 23, 2018VulnerabilityCVE-2018-11776CVE-2017-5638CVE-2017-980560
Zoom Video Conferencing for macOS Also Vulnerable to Critical RCE FlawThe Hacker News·Jul 19, 19:45 UTC · Jul 19, 2019VulnerabilityCVE-2019-13567CVE-2019-1345060
“Bash” (CVE-2014-6271) vulnerabilityKaspersky Securelist·Sep 25, 14:45 UTC · Sep 25, 2014Vulnerability in the wildCVE-2014-627160
Medical washer-disinfector appliance's web server open to attackHelp Net Security·Nov 21, 11:33 UTC · Nov 21, 2023Exploit / PoCCVE-2017-724060
Over 70 billion unprotected files available on unsecured web serversHelp Net Security·Apr 24, 00:00 UTC · Apr 24, 2023Vulnerability55
With court order, FBI removes hundreds of Exchange Server web shells from US organizationsCyberScoop·Apr 14, 00:47 UTC · Apr 14, 2021Policy & legal in the wild60
Critical Flaw in Apache Struts2 Lets Hackers Take Over Web ServersThe Hacker News·Sep 6, 10:53 UTC · Sep 6, 2017Exploit / PoCCVE-2017-980560
GhostCat: New High-Risk Vulnerability Affects Servers Running Apache TomcatThe Hacker News·Feb 28, 18:37 UTC · Feb 28, 2020VulnerabilityCVE-2020-1938CVE-2020-1935CVE-2019-1756960
79 Netgear router models affected by a dangerous ZeroSecurity Affairs·Jun 18, 16:04 UTC · Jun 18, 2020Exploit / PoC60
Flaw in Zoom software lets sites take over webcam on MacSecurity Affairs·Jul 9, 11:30 UTC · Jul 9, 2019Vulnerability55
Taiwan Web Servers Breached by UAT-7237 Using Customized OpenThe Hacker News·Aug 15, 00:00 UTC · Aug 15, 2025Data breach160
RondoDox Botnet Exploits Critical React2Shell Flaw to Hijack IoT Devices and Web ServersThe Hacker News·Jan 1, 09:19 UTC · Jan 1, 2026MalwareCVE-2025-55182CVE-2023-1389CVE-2025-2489360
Talos experts found many high severity flaws in Moxa EDRSecurity Affairs·Apr 16, 12:15 UTC · Apr 16, 2018VulnerabilityCVE-2017-12120CVE-2017-12121CVE-2017-12125+4 CVEs60
New ShroudedSnooper actor targets telecommunications firms in the Middle East with novel ImplantsCisco Talos·Sep 19, 12:00 UTC · Sep 19, 2023Malware55
NGINX Rift: an 18-year-old flaw in the world's most deployed web server just came to lightSecurity Affairs·May 14, 13:30 UTC · May 14, 2026Exploit / PoC in the wildCVE-2026-42945CVE-2026-42946CVE-2026-40701+1 CVEs60
Apache Warns of Zero-Day Exploit in the Wild — Patch Your Web Servers Now!The Hacker News·Oct 7, 05:31 UTC · Oct 7, 2021Exploit / PoC in the wildCVE-2021-41773CVE-2021-4152460
ZDI offers hefty bounties for zero-days in popular web servers, CMSesHelp Net Security·Jul 25, 00:00 UTC · Jul 25, 2018Exploit / PoC60
Critical Updates — RCE Flaws Found in SwiftMailer, PhpMailer and ZendMailThe Hacker News·Jan 5, 07:21 UTC · Jan 5, 2017VulnerabilityCVE-2016-10033CVE-2016-10045CVE-2016-10074+1 CVEs60
Researchers Defeat AMD's SEV Virtual Machine EncryptionThe Hacker News·May 28, 08:32 UTC · May 28, 2018Policy & legal55
PolyShell: unrestricted file upload in Magento and Adobe CommerceSansec (Magento / e-commerce security)·May 12, 10:55 UTC · May 12, 2026Vulnerability in the wild60