Cybersecurity News
Aggregated daily from 10 sources. Updated automatically every morning.
CISA
NCSC UK
SANS ISC
The Hacker News
Bleeping Computer
Krebs on Security
Dark Reading
SecurityWeek
Exploit-DB
CERT-In
Krayin CRM v2.2.x - Authenticated Remote Code Execution
Atarim WordPress Plugin 4.2.2 - Sensitive Information Exposure
Langflow 1.9.0 - RCE
Joomla Page Builder CK 3.5.10 - Arbitrary File Upload
MCPJam Inspector - Remote Code Execution
ProtonVPN v4.4.1 - Unquoted Service Path
Flowise 3.1.3 - arbitrary code execution
Hydra - Stack Buffer Overflow
Discuz! X5.0 - Authentication Bypass
Tenable Nessus 10.12.1 - SQL Injection
WordPress Bricks Builder Theme - RCE
iOS Bluetooth PAN Exploit - Ethernet Gateway without Adapter
Joomla Extension 4.1.4 - PHP Object injection
Pulpy 0.1.1-Beta - Filesystem Sandbox Bypass
MEmu Android Emulator 9.2.7.0 - Local Privilege Escalation
KeepInMind 0.8.4.2 - Stored XSS
KNX visualisering - Broken Access Control
Windows Defender (MsMpEng.exe) - Race Condition
WordPress Plugin WPZOOM Portfolio 1.4.21 - Reflected Cross-Site Scripting (XSS)
OpenEMR 7.0.2 - Arbitrary File Read
WordPress Contest Gallery 28.1.4 - Unauthenticated Blind SQL Injection
Drupal Core 10.5.5 - Error-Based SQL Injection
WordPress OrderConvo 14 - Path Traversal
Notepad++ 8.9.6 - Arbitrary Code Execution
YAMCS yamcs-core 5.12.7 - No Rate Limiting
YAMCS yamcs-core 5.12.7 - User Enumeration
YAMCS yamcs-core 5.12.7 - LDAP Injection
Microsoft - NTLMv2 Hash Capture
MikroORM 7.0.13 - SQL Injection
Prodigy Commerce 3.3.0 - Local File Inclusion