Technology ❯ Cybersecurity ❯ Threats

Exploits

Zero-Day Vulnerabilities Remote Code Execution Privilege Escalation Proof of Concept Remote Attacks Zero-Day Exploits Command Injection Code Injection Malware CVE Vulnerabilities

Second‑Order SQL Flaw in Popular WordPress Migration Plugin Leaves Millions Exposed

Slow update rates mean routine restore actions can trigger a chain that leaks the plugin’s secret key and allows unauthenticated imports.

Critical WordPress Plugin Flaws Leave Hundreds of Thousands of Sites at Risk

macOS Screen Sharing Flaw Exploited to Root Macs and Install Monero Miners

Microsoft Ships August Patch Tuesday Fixes for About 400 Vulnerabilities Including an Exploited Zero‑Day

Critical Outlook Web Access Flaw Used to Deploy In‑Browser Backdoor OWAReaper

Check Point Patches Exploited SmartConsole Authentication Bypass

Zimbra Issues Urgent Patch for Critical SNMP Command Injection

Public Exploits Target WordPress wp2shell Pre‑Auth RCE After Emergency Patch

SonicWall SMA1000 Zero‑Days Are Being Actively Exploited and Vendor Issues Hotfixes

Microsoft Patches RoguePlanet Elevation‑of‑Privilege Flaw in Defender

HalluSquatting Lets Attackers Pre-Register AI Hallucinations to Seed Malicious Packages

Adobe Issues Urgent Patches for Seven Maximum‑Severity ColdFusion and Campaign Flaws

Maximum-Severity Ivanti Sentry Flaw Triggers Rapid Exploitation

Arista Declines Patch for Actively Exploited EOS Tunnel Flaw

Google Releases Emergency Chrome 149 Patch for Actively Exploited V8 Zero‑Day

Critical WP Maps Pro Flaw Lets Attackers Create WordPress Admin Accounts

Microsoft Threatens Legal Action After Public Release of Six Windows Zero‑Days

Microsoft Patches High-Severity SharePoint Deserialization RCE

Microsoft Issues Emergency Patches for Two Actively Exploited Defender Zero‑Days

Cisco Fixes Critical Secure Workload API Flaw That Can Grant Site Admin Access