#exploited


Weaver E-cology RCE Flaw CVE-2026-22679 Actively Exploited via Debug API

May 5, 2026 // 11:34

A critical security vulnerability in Weaver (Fanwei) E-cology, an enterprise office automation (OA) and collaboration platform, has come under active exploitation in the wild. The […]

Weaver E-cology critical bug exploited in attacks since March

May 5, 2026 // 01:56

Hackers have been exploiting a critical vulnerability (CVE-2026-22679) in the Weaver E-cology office automation since mid-March to run discovery commands. The attacks started five days […]

CISA says ‘Copy Fail’ flaw now exploited to root Linux systems

May 4, 2026 // 14:36

CISA has warned that threat actors have started exploiting the “Copy Fail” Linux security vulnerability in the wild, one day after Theori researchers disclosed it and shared […]

CISA Adds Actively Exploited Linux Root Access Bug CVE-2026-31431 to KEV

May 3, 2026 // 11:41

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added a recently disclosed security flaw impacting various Linux distributions to its Known Exploited Vulnerabilities […]

LiteLLM CVE-2026-42208 SQL Injection Exploited within 36 Hours of Disclosure

May 1, 2026 // 00:42

In yet another instance of threat actors quickly jumping on the exploitation bandwagon, a newly disclosed critical security flaw in BerriAI’s LiteLLM Python package has […]

CISA Adds Actively Exploited ConnectWise and Windows Flaws to KEV

May 1, 2026 // 00:42

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added two security flaws impacting ConnectWise ScreenConnect and Microsoft Windows to its Known Exploited Vulnerabilities […]

Critical cPanel and WHM bug exploited as a zero-day, PoC now available

May 1, 2026 // 00:17

The critical CVE-2026-41940 authentication bypass vulnerability in cPanel, WHM, and WP Squared is being actively exploited in the wild and has been leveraged in attempts […]

CISA orders feds to patch Windows flaw exploited as zero-day

Apr 29, 2026 // 13:57

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to secure their Windows systems against a vulnerability exploited in zero-day attacks. Tracked […]

CISA orders feds to patch Windows flaw exploited as zero-day

Apr 29, 2026 // 13:37

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to secure their Windows systems against a vulnerability exploited in zero-day attacks. Tracked […]

CISA Adds Actively Exploited ConnectWise and Windows Flaws to KEV

Apr 29, 2026 // 11:52

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added two security flaws impacting ConnectWise ScreenConnect and Microsoft Windows to its Known Exploited Vulnerabilities […]

Previous 1 … 18 19 20 21 22 … 24 Next