#flaw


Hackers exploit critical JFrog Artifactory flaw to forge admin tokens

Sep 3, 2026 // 00:17

A critical authentication bypass vulnerability (CVE-2026-82329) in JFrog Artifactory is being exploited in attacks to create tokens that provide administrative access. The flaw is present […]

WordPress backup plugin flaw exposes millions of sites to takeover attacks

Sep 3, 2026 // 00:17

An SQL injection vulnerability in the All-in-One WP Migration and Backup plugin for WordPress could allow unauthenticated attackers to execute remote code and take control […]

Hackers exploit Sangoma Switchvox flaw to deploy reverse shells

Sep 3, 2026 // 00:17

Attackers are actively exploiting CVE-2026-9586, an unauthenticated SQL injection vulnerability in the Sangoma Switchvox VoIP platform that can lead to remote code execution. According to […]

Attackers Exploit Critical Switchvox Flaw to Deploy Reverse Shells Without Credentials

Sep 2, 2026 // 11:35

Threat actors are exploiting a severe security vulnerability in Sangoma Switchvox, an enterprise VoIP platform, that could allow unauthenticated remote code execution. The vulnerability in […]

Critical Langflow flaw exploited to steal OpenAI and AWS keys

Sep 1, 2026 // 23:37

Threat actors are exploiting an unauthenticated remote code execution vulnerability (CVE-2026-0768) in Langflow, an open-source framework for building AI applications, to steal credentials, tokens, and […]

Cosmos EVM Flaw Exploited After Cosmos Labs Knew Every Blockchain Running It Was Vulnerable

Aug 29, 2026 // 00:24

Cosmos Labs has warned that a critical balance-handling flaw in the shared Cosmos EVM module was exploited to drain funds from six blockchains between August […]

GiveWP WordPress donation plugin flaw lets hackers execute server commands

Aug 28, 2026 // 21:37

A maximum-severity vulnerability in the GiveWP plugin for WordPress allows an unauthenticated attacker to execute arbitrary commands on the hosting server. The security issue is […]

ownCloud Flaw Exploited to Steal Nuclear Records From Philippine Research Body

Aug 28, 2026 // 19:00

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a critical security flaw impacting ownCloud to its Known Exploited Vulnerabilities (KEV) catalog following […]

Critical cPanel Flaw Could Let One Hosting Customer Take Root Control of a Whole Server

Aug 28, 2026 // 12:50

cPanel has released patches for a security flaw affecting domain parking and addon domain functionality in cPanel and WebHost Manager (WHM), which could allow code […]

PaperCut warns of NG, MF flaw exploited in zero-day attacks

Aug 27, 2026 // 19:37

PaperCut is warning that hackers are actively exploiting a vulnerability in all versions of its PaperCut NG and PaperCut MF print management software in zero-day attacks. […]

Previous 1 … 9 10 11 12 13 … 60 Next