Critical and exploited CVEs, vulnerability intelligence and remediation guidance.
A critical vulnerability in WordPress core allows unauthenticated remote code execution through a REST API batch-route confusion and SQL injection issue. Affects…
Okta's Red Team has disclosed a denial-of-service vulnerability in OpenSSL, dubbed HollowByte, that allows an attacker to freeze server memory using 11-byte…
A low-severity vulnerability in OpenSSL's TLS 1.3 certificate compression feature allows a peer-supplied length to grow a heap buffer before validation, potentially…
A moderate-severity vulnerability in OpenSSL's QUIC implementation allows unbounded memory growth via the PATH_CHALLENGE handler, leading to denial of service through memory…
GoldenEyeDog Subgroup Linked to DigiCert Breach and Code-Signing Certificate Theft Ravie LakshmananJul 17, 2026Malware / Threat Intelligence Cybersecurity researchers have attributed the…
CVE-2022-22947 is a remote code execution vulnerability in Spring Cloud Gateway that occurs when the Actuator endpoint is enabled and exposed unsecured.
CVE-2017-12611 is a remote code execution vulnerability in Apache Struts via the Freemarker tag.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical remote code execution vulnerability in Microsoft SharePoint Server, tracked as…
ThreatsDay: Game Cheat Spyware, 24-Hour Ransomware, Chrome Sync Stalking + 12 More Stories Ravie LakshmananJul 16, 2026Hacking News / Cybersecurity News A…
A high-severity vulnerability in n8n Enterprise token exchange allows attackers to log in as any user by exploiting missing issuer validation in…