#flaw


Weaver E-cology RCE Flaw CVE-2026-22679 Actively Exploited via Debug API

May 5, 2026 // 11:34

A critical security vulnerability in Weaver (Fanwei) E-cology, an enterprise office automation (OA) and collaboration platform, has come under active exploitation in the wild. The […]

Progress warns of critical MOVEit Automation auth bypass flaw

May 4, 2026 // 15:36

Progress Software warned customers to patch a critical authentication bypass vulnerability in its MOVEit Automation enterprise-grade managed file transfer (MFT) application. MOVEit Automation automates complex […]

CISA says ‘Copy Fail’ flaw now exploited to root Linux systems

May 4, 2026 // 14:36

CISA has warned that threat actors have started exploiting the “Copy Fail” Linux security vulnerability in the wild, one day after Theori researchers disclosed it and shared […]

Critrical cPanel flaw mass-exploited in “Sorry” ransomware attacks

May 3, 2026 // 00:56

A new disclosed cPanel flaw tracked as CVE-2026-41940 is being mass-exploited to breach websites and encrypt data in “Sorry” ransomware attacks. This week, an emergency […]

Researchers Discover Critical GitHub CVE-2026-3854 RCE Flaw Exploitable via Single Git Push

May 1, 2026 // 00:42

Cybersecurity researchers have disclosed details of a critical security vulnerability impacting GitHub.com and GitHub Enterprise Server that could allow an authenticated user to obtain remote […]

New Linux ‘Copy Fail’ flaw gives hackers root on major distros

May 1, 2026 // 00:17

An exploit has been published for a local privilege escalation vulnerability dubbed “Copy Fail” that impacts Linux kernels released since 2017, allowing an unprivileged local […]

GitHub fixes RCE flaw that gave access to millions of private repos

Apr 29, 2026 // 15:57

In early March, GitHub patched a critical remote code execution vulnerability (CVE-2026-3854) that could have allowed attackers to access millions of private repositories. The flaw was reported […]

CISA orders feds to patch Windows flaw exploited as zero-day

Apr 29, 2026 // 13:57

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to secure their Windows systems against a vulnerability exploited in zero-day attacks. Tracked […]

CISA orders feds to patch Windows flaw exploited as zero-day

Apr 29, 2026 // 13:37

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to secure their Windows systems against a vulnerability exploited in zero-day attacks. Tracked […]

Hackers are exploiting a critical LiteLLM pre-auth SQLi flaw

Apr 29, 2026 // 00:57

Hackers are targeting sensitive information stored in the LiteLLM open-source large-language model (LLM) gateway by exploiting a critical vulnerability  tracked as CVE-2026-42208. The flaw is […]

Previous 1 … 52 53 54 55 56 … 60 Next