GoKawiil - Tech News

121.

Max-severity flaw in ChromaDB for AI apps allows server hijacking (bleepingcomputer.com)

2026-05-19 | get ChromaDB Security Patch → | tags: chromadb, cve-2026-45829, fastapi

122.

New Windows 'MiniPlasma' Zero-Day Exploit Gives SYSTEM Access, PoC Released (slashdot.org)

2026-05-18 | get Windows Security Patch Kit → | tags: windows, miniplasma, cve-2020-17103

123.

Microsoft Exchange Zero-Day Under Attack, No Patch Available (darkreading.com)

2026-05-18 | get Microsoft Exchange Security Book → | tags: microsoft exchange, cve-2026-42897, outlook web access

124.

Exploit available for new DirtyDecrypt Linux root escalation flaw (bleepingcomputer.com)

2026-05-18 | get Linux Exploit Development Book → | tags: dirtydecrypt, linux kernel, rxgk module

125.

Microsoft Exchange Server Vulnerability Actively Exploited, in a Bad Week for Microsoft (slashdot.org)

2026-05-17 | by Posted | get Microsoft Exchange Server Security Kit → | tags: microsoft exchange server, cve-2026-42897, outlook web access

126.

Amazon Stops Supporting Pre-2013 Kindles Today. Some Owners Turn to Jailbreaking (slashdot.org)

2026-05-17 | by Posted | get Kindle Jailbreak Kit → | tags: amazon, kindle, jailbreaking

127.

Avada Builder WordPress plugin flaws allow site credential theft (bleepingcomputer.com)

2026-05-15 | get WordPress Security Plugin → | tags: avada builder, wordpress, cve-2026-4782

128.

O(x)Caml in Space (news.ycombinator.com)

2026-05-15 | by Thomas Gazagnaire | get O(x)Caml Programming Book → | tags: ocaml, space, ccdes

129.

Microsoft warns of Exchange zero-day flaw exploited in attacks (bleepingcomputer.com)

2026-05-15 | get Microsoft Exchange Security Patch → | tags: exchange server, microsoft, cve-2026-42897

130.

New Nginx Exploit (news.ycombinator.com)

2026-05-14 | get Nginx Security Patch Kit → | tags: nginx, cve-2026-42945, heap buffer overflow

131.

Hackers exploit auth bypass flaw in Burst Statistics WordPress plugin (bleepingcomputer.com)

2026-05-14 | get WordPress Security Plugin → | tags: burst statistics, wordpress plugin, cve-2026-8181

132.

Cisco warns of new critical SD-WAN flaw exploited in zero-day attacks (bleepingcomputer.com)

2026-05-14 | get Cisco SD-WAN Security Kit → | tags: cisco, catalyst sd-wan, cve-2026-20182

133.

18-year-old NGINX vulnerability allows DoS, potential RCE (bleepingcomputer.com)

2026-05-14 | get NGINX Security Patch → | tags: nginx, cve-2026-42945, reverse proxy

134.

New Fragnesia Linux flaw lets attackers gain root privileges (bleepingcomputer.com)

2026-05-14 | get Linux Kernel Security Book → | tags: linux, kernel, fragnasia

135.

CERT is releasing six CVEs for serious security vulnerabilities in dnsmasq (news.ycombinator.com)

2026-05-12 | get Dnsmasq Security Patch Kit → | tags: dnsmasq, cves, cert

136.

Dead.Letter (CVE-2026-45185) – How XBOW found an unauthenticated RCE on Exim (news.ycombinator.com)

2026-05-12 | get Exim Email Server Security Kit → | tags: exim, cve-2026-45185, xbown

137.

Dead.letter (CVE-2026-45185) Humans vs. LLM for Unauthenticated RCE Race on Exim (news.ycombinator.com)

2026-05-12 | get Exim Email Server Security Book → | tags: exim, cve-2026-45185, unauthenticated rce

138.

Fortinet warns of critical RCE flaws in FortiSandbox and FortiAuthenticator (bleepingcomputer.com)

2026-05-12 | get Fortinet FortiSandbox Security Kit → | tags: fortinet, fortisandbox, fortiauthenticator

139.

Incident Report: CVE-2024-YIKES (news.ycombinator.com)

2026-05-10 | by Andrew Nesbitt | get CVE-2024-YIKES Security Patch → | tags: cve-2024-yikes, yubikey, left-justify

140.

Dirty Frag: Universal Linux LPE (news.ycombinator.com)

2026-05-08 | get Linux Privilege Escalation Toolkit → | tags: dirty frag, linux kernel, xfrm-esp

141.

The React2Shell Story (news.ycombinator.com)

2026-05-08 | get React Developer Toolkit → | tags: react, meta, next.js

142.

CISA gives feds four days to patch Ivanti flaw exploited as zero-day (bleepingcomputer.com)

2026-05-08 | get Ivanti Security Patch Kit → | tags: cisa, ivanti, epmm

143.

GNU IFUNC is the real culprit behind CVE-2024-3094 (news.ycombinator.com)

2026-05-08 | get Linux Kernel Security Book → | tags: gnu ifunc, cve-2024-3094, xz-utils

144.

OpenAI launches new voice intelligence features in its API (techcrunch.com)

2026-05-07 | by Lucas Ropek | get OpenAI Voice SDK → | tags: openai, gpt-realtime-2, gpt-realtime-translate

145.

How Cloudflare responded to the “Copy Fail” Linux vulnerability (news.ycombinator.com)

2026-05-07 | get Cloudflare Security Toolkit → | tags: cloudflare, linux kernel, cve-2026-31431

146.

Cloudflare responded to the "Copy Fail" Linux vulnerability (news.ycombinator.com)

2026-05-07 | get Cloudflare Security Badge → | tags: cloudflare, linux kernel, cve-2026-31431

147.

Palo Alto Networks firewall zero-day exploited for nearly a month (bleepingcomputer.com)

2026-05-07 | get Palo Alto Networks Firewall Security Kit → | tags: palo alto networks, pan-os, cve-2026-0300

148.

Khosla-backed robotics startup Genesis AI has gone full stack, demo shows (techcrunch.com)

2026-05-06 | by Anna Heim | get Robotics Development Kit → | tags: genesis ai, gene-26.5, robotics startup

149.

Khosla-backed robotics startup Genesis AI has gone full-stack, demo shows (techcrunch.com)

2026-05-06 | by Anna Heim | get Robotics Development Kit → | tags: genesis ai, robotic hands, gene-26.5

150.

Critical vm2 sandbox bug lets attackers execute code on hosts (bleepingcomputer.com)

2026-05-06 | get VMware Workstation Pro → | tags: vm2, node.js, cve-2026-26956