#flaw


CISA: Hackers now exploit SolarWinds Serv-U flaw to crash servers

Jun 5, 2026 // 23:57

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned today that hackers are now actively exploiting a recently patched high-severity SolarWinds Serv-U flaw to crash […]

Hackers Exploit Critical Everest Forms Pro WordPress Plugin Flaw to Take Over Sites

Jun 5, 2026 // 13:16

Threat actors are actively exploiting a critical security flaw in Everest Forms Pro, a WordPress plugin with about 4,000 active installations, to execute arbitrary code, […]

Cisco warns of critical Unified CM flaw with PoC exploit code

Jun 4, 2026 // 14:36

Cisco has released security updates to patch a critical-severity Unified Communications Manager (Unified CM) flaw that allows attackers to gain root privileges. Cisco Unified CM […]

CISA Adds Exploited Magento RCE Flaw CVE-2026-45247 to KEV Catalog

Jun 4, 2026 // 14:26

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a critical flaw impacting Mirasvit Cache Warmer, a popular Magento full-page cache extension, to […]

Autonomous AI Tool Finds 2-Year-Old RCE Flaw in Redis (CVE-2026-23479)

Jun 3, 2026 // 16:54

Redis has patched a use-after-free in its blocking-client code that lets an authenticated user run arbitrary OS commands on the machine hosting the database. The […]

Critical Kirki flaw exploited to hijack WordPress admin accounts

Jun 3, 2026 // 01:17

Hackers are exploiting a critical privilege escalation vulnerability (CVE-2026-8206) in the Kirki plugin for WordPress to take over any user account, including those belonging to […]

CISA flags two-year-old Oracle flaw as actively exploited in attacks

Jun 2, 2026 // 15:56

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered government agencies to secure their systems against a high-severity Oracle WebLogic Server vulnerability that was […]

⚡ Weekly Recap: New Linux Flaw, PAN-OS Exploit, AI-Powered Attacks, OAuth Phishing and More

Jun 1, 2026 // 22:14

Monday hit like a cron job with anger issues. A busted auth path here, a repo-side faceplant there, some “patched-ish” thing already getting chewed on […]

Critical Windows Netlogon RCE flaw now exploited in attacks

Jun 1, 2026 // 15:36

The Centre for Cybersecurity Belgium (CCB), the country’s national authority for cybersecurity, warned on Friday that threat actors are now exploiting a recently patched critical […]

Critical WP Maps Pro Flaw Actively Exploited to Create Admin Accounts

Jun 1, 2026 // 12:33

Threat actors are attempting to actively exploit a critical security flaw impacting WP Maps Pro, a WordPress plugin that has had over 15,000 sales on […]

Previous 1 … 48 49 50 51 52 … 60 Next