#flaw


ServiceNow Flaw Exploited to Gain Unauthorized Access to Customer Instances

Jun 10, 2026 // 10:20

ServiceNow has warned about a security incident in which unknown threat actors exploited a flaw to obtain deeper unauthorized access to susceptible instances. “On June […]

Veeam Backup & Replication RCE Flaw Lets Domain Users Run Remote Code

Jun 9, 2026 // 19:47

Veeam has released security patches to address a critical flaw in its Backup & Replication software that could result in remote code execution. Tracked as […]

Google patches new Chrome zero-day flaw exploited in the wild

Jun 9, 2026 // 11:17

Google has released emergency updates to patch another Chrome zero-day vulnerability that has been exploited in the wild, the fifth such flaw patched since the […]

LiteLLM Flaw CVE-2026-42271 Exploited in the Wild, Chains to Unauthenticated RCE

Jun 9, 2026 // 11:17

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a high-severity flaw impacting BerriAI LiteLLM to its Known Exploited Vulnerabilities (KEV) catalog, citing […]

One-Character Linux Kernel Flaw Enables Local Root Access, Exploits Now Public

Jun 9, 2026 // 00:51

Security researchers have published a detailed, working exploit for a Linux kernel use-after-free that lets an unprivileged local user escalate to root and break out […]

Critical Check Point VPN Flaw Exploited to Bypass Passwords in IKEv1 Setups

Jun 8, 2026 // 19:41

Check Point has warned of active exploitation of a critical vulnerability impacting Remote Access VPN and Mobile Access deployments that are configured to use the […]

C0XMO botnet spreads via DD-WRT router flaw, kills rival malware

Jun 7, 2026 // 17:36

A new variant of the Gafgyt botnet called C0XMO is targeting DD-WRT router firmware and can move to other device types with various CPU architectures. […]

Critical Everest Forms Pro flaw exploited to take over WordPress sites

Jun 6, 2026 // 17:16

Hackers are actively exploiting a critical vulnerability (CVE-2026-3300) in the Everest Forms Pro plugin, which lets them take complete control of a WordPress website. The […]

CISA Adds Actively Exploited SolarWinds Serv-U DoS Flaw to KEV Catalog

Jun 6, 2026 // 11:48

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a high-severity security flaw impacting SolarWinds Serv-U multi-protocol file server software to its Known Exploited […]

Cisco Catalyst SD-WAN Manager CVE-2026-20245 Flaw Actively Exploited – No Patch Available

Jun 6, 2026 // 07:27

Cisco has warned that a high-severity security flaw impacting Catalyst SD-WAN Manager has come under active exploitation. The vulnerability, tracked as CVE-2026-20245, carries a CVSS […]

Previous 1 … 47 48 49 50 51 … 60 Next