#flaw


New Check Point flaw lets hackers execute code with root privileges

Sep 18, 2026 // 12:36

Check Point Software has released security updates to address a critical vulnerability that can let attackers execute code with root privileges on management systems. Tracked […]

Critical Check Point Management Flaw Lets Unauthenticated Attackers Run Code as Root

Sep 17, 2026 // 21:10

A critical vulnerability in Check Point’s Security Management and Log Servers could allow an attacker without login credentials to run code as root on those […]

Critical Unbound DNSSEC Validator Flaw Could Allow RCE via a Malicious DNS Zone

Sep 17, 2026 // 18:51

Every release of the Unbound DNS resolver before 1.26.1 has a critical heap overflow in its DNSSEC validator, maintainer NLnet Labs said in an advisory […]

Critical Docker Sandboxes Flaw Lets Malicious Guest Code Read and Modify macOS Host Files

Sep 17, 2026 // 18:51

Malicious code running inside a Docker Sandboxes virtual machine on macOS could escape the project directory shared into it and read or change files anywhere […]

Attackers Exploit Issabel Framework Flaw Enabling Unauthenticated OS Command Execution

Sep 16, 2026 // 19:00

A critical security flaw in Issabel Framework, a web-based framework for the open-source unified communications PBX software, has come under active exploitation. The vulnerability in […]

Parallels Desktop Flaw Lets Non-Admin Mac Users Gain Root, but Intel Macs Can’t Install Fix

Sep 16, 2026 // 16:20

Parallels Desktop for Mac has a flaw that lets an ordinary local account run code as root, the highest level of access on a Mac, […]

Google Patches Pixel Modem Flaw Amid Signs of Limited Targeted Exploitation

Sep 16, 2026 // 14:20

Google has disclosed that a high-severity security flaw in its Pixel Cellular Modem has come under exploitation in the wild. The vulnerability, tracked as CVE-2026-58704 […]

Critical ScreenConnect flaw now actively exploited in attacks

Sep 16, 2026 // 14:16

Attackers now exploit a critical-severity ConnectWise ScreenConnect vulnerability in the wild, according to the U.S. Cybersecurity and Infrastructure Security Agency (CISA). ConnectWise shared temporary mitigation measures […]

Attackers Exploit WooCommerce Wholesale Lead Capture Flaw to Plant PHP Web Shells

Sep 16, 2026 // 11:41

Threat actors are exploiting a critical security flaw in WooCommerce Wholesale Lead Capture, a premium WordPress plugin that has more than 6,000 active installs. “This […]

Acronis warns of actively exploited flaw in its cPanel backup plugin

Sep 16, 2026 // 00:56

Acronis disclosed a high-severity Linux local privilege escalation vulnerability in its backup plugin for cPanel, WebHost Manager (WHM), and Plesk that may be exploited in […]

Previous 1 … 5 6 7 8 9 … 60 Next