Coverage
Vulnerabilities
903 articles on vulnerability disclosures and exploits
Advertisement
Android CVE-2026-0073: Critical System RCE Patch Guidance
Google addresses a critical zero-click RCE vulnerability (CVE-2026-0073) in the Android System component. Learn how to mitigate this high-impact security flaw.
Google Android VRP 2024 Updates: $1.5M for Pixel Kernel Exploits
Google overhauls its Vulnerability Rewards Programs, increasing payouts for complex Android exploits while devaluing bugs easily identified by AI tools.
CVE-2026-22679: Weaver E-cology 10.0 RCE via Debug API - Patch Now
Active exploitation of CVE-2026-22679 allows unauthenticated RCE in Weaver E-cology 10.0 via a DevOps debug API. Organizations must apply patches immediately.
CVE-2023-2523: Weaver E-cology RCE Exploitation and Mitigation
Threat actors are exploiting critical file upload flaws in Weaver E-cology software to achieve RCE. Learn how to detect and patch CVE-2023-2523 today.
CVE-2023-29489: How Attackers Exploit cPanel XSS for Auth Bypass
A critical authentication bypass in cPanel via CVE-2023-29489 is under active exploitation. Discover technical details and essential mitigation steps.
MOVEit Automation Critical Authentication Bypass Mitigation Guide
Progress Software has patched a critical authentication bypass in MOVEit Automation. Secure your managed file transfer workflows and sensitive data today.
AI-Powered Phishing and GitHub RCE: Analyzing Modern Breach Trends
Threat actors are using AI-powered phishing and GitHub RCE to move from simple breaches to long-term occupation of SaaS and open-source environments.
CVE-2024-1086: Copy Fail Linux Privilege Escalation Under Exploitation
CISA adds CVE-2024-1086 (Copy Fail) to its KEV catalog after Microsoft observes exploitation of this Linux Netfilter privilege escalation vulnerability.
CVE-2024-5805: MOVEit Automation Authentication Bypass Mitigation Guide
Progress Software has issued a patch for a critical authentication bypass vulnerability in MOVEit Automation, tracked as CVE-2024-5805 with a CVSS of 9.1.
cPanel CVE-2026-41940 Exploitation: 40,000 Servers Compromised
Attackers leverage a zero-day vulnerability in cPanel, identified as CVE-2026-41940, to gain administrative access to over 40,000 hosting servers.
Wireshark 4.6.5 Security Update: 38 CVEs Patched — Upgrade Guide
Wireshark 4.6.5 addresses 38 CVEs and 43 vulnerabilities across protocol dissectors. Learn how to mitigate risks and protect packet analysis systems.
CVE-2026-31431: CISA Warns of Linux Local Privilege Escalation Exploit
CISA adds CVE-2026-31431 to its KEV catalog following active exploitation of a Linux local privilege escalation flaw. Learn how to mitigate root access risks.