CVE-2017-17215 — Vulnerability brief
CVE-2017-17215 was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
Category: Critical CVEs
Critical and exploited CVEs, vulnerability intelligence and remediation guidance.
Langflow RCE Exploited to Deploy Monero Miner on Exposed AI App Endpoints
Threat actors are actively exploiting CVE-2026-33017, a critical unauthenticated remote code execution vulnerability in Langflow (CVSS 9.3), to deploy a Monero cryptocurrency…
CVE-2025-3248: Langflow Unauthenticated RCE Vulnerability
Langflow versions before 1.3.0 expose the /api/v1/validate/code endpoint without authentication, allowing remote attackers to execute arbitrary Python code. CVSS score 9.8. Added…
CVE-2026-14241 — Critical vulnerability brief
CVSS 9.8Memory safety bugs present in Firefox 152.0.3. Some of these bugs showed evidence of memory corruption and we presume that with enough…
SimpleHelp CVE-2026-48558 Exploited to Deploy TaskWeaver and Djinn Stealer Malware
An unknown threat actor is exploiting CVE-2026-48558, a critical authentication bypass vulnerability in SimpleHelp (CVSS 10.0), to deliver two new malware families:…
CVE-2024-38271: Quick Share for Windows Code Execution Vulnerability
A vulnerability in Google's Quick Share for Windows that could allow an attacker to execute arbitrary code. Part of a 10-bug chain…
CVE-2024-38272: Quick Share for Windows Code Execution Vulnerability
A vulnerability in Google's Quick Share for Windows that could allow an attacker to execute arbitrary code. Part of a 10-bug chain…
CVE-2024-10668: Quick Share for Windows Bypass of Previous Fixes
A vulnerability in Google's Quick Share for Windows that bypassed fixes for CVE-2024-38271 and CVE-2024-38272, reported by SafeBreach in 2025.
AirDrop and Quick Share Flaws Let Nearby Attackers Crash Devices and Bypass Security Checks
Researchers from the CISPA Helmholtz Center for Information Security have uncovered six security flaws in Apple's AirDrop and Google/Samsung's Quick Share wireless…
Progress Kemp LoadMaster Pre-Auth Root Command Injection Flaw (CVE-2026-8037) Patched
A critical vulnerability in Progress Kemp LoadMaster, tracked as CVE-2026-8037 with a CVSS score of 9.8, allows unauthenticated attackers to execute arbitrary…