#exploited


Critical Nginx UI auth bypass flaw now actively exploited in the wild

Apr 16, 2026 // 09:38

A critical vulnerability in Nginx UI with Model Context Protocol (MCP) support is now being exploited in the wild for full server takeover without authentication. […]

CISA flags Windows Task Host vulnerability as exploited in attacks

Apr 15, 2026 // 17:57

CISA warned U.S. government agencies to secure their systems against a Windows Task Host privilege escalation vulnerability that could allow attackers to gain SYSTEM privileges. […]

Critical flaw in Marimo, allowing remote code execution before authentication, is now being actively exploited in the wild.

Apr 12, 2026 // 17:37

A serious security issue in the Marimo Python notebook platform was quickly taken advantage of by hackers, starting only 10 hours after the vulnerability was […]

Webloc Exploited: 500M Devices Tracked via Ad Data by Law Enforcement, Citizen Lab Finds.

Apr 11, 2026 // 10:40

A global geolocation surveillance system called Webloc, which uses advertising data, has reportedly been used by Hungarian intelligence, El Salvador’s national police, and numerous U.S. […]

Marimo RCE (CVE-2026-39987) exploited in under 10 hours after vulnerability revealed.

Apr 10, 2026 // 13:42

A serious security flaw in Marimo, a free and open Python tool for data work, was targeted just 10 hours after it was revealed publicly, […]

Ninja Forms plugin vulnerability exploited by hackers. Urgent patching required!

Apr 8, 2026 // 01:17

A serious security hole exists in the Ninja Forms File Uploads add-on for WordPress, allowing unauthorized users to upload any type of file, potentially leading […]

GPU flaw lets attackers seize total CPU control. GDDR6 bit flips exploited for privilege escalation.

Apr 7, 2026 // 11:38

New research has uncovered several RowHammer attacks targeting powerful graphics cards (GPUs). These attacks can be used to gain higher levels of access and, in […]

Federal agencies must patch exploited Fortinet flaw by Friday

Apr 6, 2026 // 19:17

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) mandated that federal agencies protect their FortiClient Enterprise Management Server (EMS) systems against a vulnerability being actively […]

Claude code leak exploited: GitHub hit by info-stealing malware attacks.

Apr 3, 2026 // 00:17

Cybercriminals are taking advantage of the recent Claude Code source code disclosure by spreading the Vidar data-stealing malware through deceptive GitHub repositories. Claude Code is […]

CISA: Patch actively exploited Citrix vulnerability by Thursday. Federal agencies affected.

Mar 31, 2026 // 10:17

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has mandated that government entities apply fixes to their Citrix NetScaler systems for an actively exploited security […]

Previous 1 … 20 21 22 23 24 Next