GoKawiil
BadHost – CVE-2026-48710: Starlette Host-Header Auth Bypass
(news.ycombinator.com)
61.
62.
CISA orders feds to patch actively exploited Drupal vulnerability
(bleepingcomputer.com)
63.
CVE-2026-28952: Apple macOS 26.5 Kernel Vuln found by Claude
(news.ycombinator.com)
64.
Ghost CMS SQL injection flaw exploited in large-scale ClickFix campaign
(bleepingcomputer.com)
65.
Trend Micro warns of Apex One zero-day exploited in the wild
(bleepingcomputer.com)
66.
Drupal: Critical SQL injection flaw now targeted in attacks
(bleepingcomputer.com)
67.
Max severity Cisco Secure Workload flaw gives Site Admin privileges
(bleepingcomputer.com)
68.
Microsoft warns of new Defender zero-days exploited in attacks
(bleepingcomputer.com)
69.
Max-severity flaw in ChromaDB for AI apps allows server hijacking
(bleepingcomputer.com)
70.
Microsoft Exchange Zero-Day Under Attack, No Patch Available
(darkreading.com)
71.
Exploit available for new DirtyDecrypt Linux root escalation flaw
(bleepingcomputer.com)
72.
73.
Avada Builder WordPress plugin flaws allow site credential theft
(bleepingcomputer.com)
74.
Microsoft warns of Exchange zero-day flaw exploited in attacks
(bleepingcomputer.com)
75.
New Nginx Exploit
(news.ycombinator.com)
76.
Hackers exploit auth bypass flaw in Burst Statistics WordPress plugin
(bleepingcomputer.com)
77.
Cisco warns of new critical SD-WAN flaw exploited in zero-day attacks
(bleepingcomputer.com)
78.
18-year-old NGINX vulnerability allows DoS, potential RCE
(bleepingcomputer.com)
79.
New Fragnesia Linux flaw lets attackers gain root privileges
(bleepingcomputer.com)
80.
CERT is releasing six CVEs for serious security vulnerabilities in dnsmasq
(news.ycombinator.com)
81.
Dead.Letter (CVE-2026-45185) – How XBOW found an unauthenticated RCE on Exim
(news.ycombinator.com)
82.
Dead.letter (CVE-2026-45185) Humans vs. LLM for Unauthenticated RCE Race on Exim
(news.ycombinator.com)
83.
Fortinet warns of critical RCE flaws in FortiSandbox and FortiAuthenticator
(bleepingcomputer.com)
84.
Dirty Frag: Universal Linux LPE
(news.ycombinator.com)
85.
CISA gives feds four days to patch Ivanti flaw exploited as zero-day
(bleepingcomputer.com)
86.
How Cloudflare responded to the “Copy Fail” Linux vulnerability
(news.ycombinator.com)
87.
Cloudflare responded to the "Copy Fail" Linux vulnerability
(news.ycombinator.com)
88.
Palo Alto Networks firewall zero-day exploited for nearly a month
(bleepingcomputer.com)
89.
Critical vm2 sandbox bug lets attackers execute code on hosts
(bleepingcomputer.com)
90.
New Cisco DoS flaw requires manual reboot to revive devices
(bleepingcomputer.com)