GoKawiil - Tech News

1.

Ghost CMS SQL injection flaw exploited in large-scale ClickFix campaign (bleepingcomputer.com)

2026-05-24 | tags: ghost cms, sql injection, cve-2026-26980

2.

Trend Micro warns of Apex One zero-day exploited in the wild (bleepingcomputer.com)

2026-05-22 | get Trend Micro Apex One Security → | tags: trend micro, apex one, cve-2026-34926

3.

Drupal: Critical SQL injection flaw now targeted in attacks (bleepingcomputer.com)

2026-05-22 | get SQL Injection Security Kit → | tags: drupal, sql injection, postgresql

4.

Max severity Cisco Secure Workload flaw gives Site Admin privileges (bleepingcomputer.com)

2026-05-21 | get Cisco Secure Workload Security Book → | tags: cisco secure workload, cve-2026-20223, site admin privileges

5.

Microsoft warns of new Defender zero-days exploited in attacks (bleepingcomputer.com)

2026-05-21 | get Microsoft Defender Security Pack → | tags: microsoft defender, zero-day exploits, cve-2026-41091

6.

Hackers bypass SonicWall VPN MFA due to incomplete patching (bleepingcomputer.com)

2026-05-20 | get SonicWall VPN Security Kit → | tags: sonicwall, cve-2024-12802, gen6

7.

Max-severity flaw in ChromaDB for AI apps allows server hijacking (bleepingcomputer.com)

2026-05-19 | get ChromaDB Security Patch → | tags: chromadb, cve-2026-45829, fastapi

8.

New Windows 'MiniPlasma' Zero-Day Exploit Gives SYSTEM Access, PoC Released (slashdot.org)

2026-05-18 | get Windows Security Patch Kit → | tags: windows, miniplasma, cve-2020-17103

9.

Microsoft Exchange Zero-Day Under Attack, No Patch Available (darkreading.com)

2026-05-18 | get Microsoft Exchange Security Book → | tags: microsoft exchange, cve-2026-42897, outlook web access

10.

Exploit available for new DirtyDecrypt Linux root escalation flaw (bleepingcomputer.com)

2026-05-18 | get Linux Exploit Development Book → | tags: dirtydecrypt, linux kernel, rxgk module

11.

Microsoft Exchange Server Vulnerability Actively Exploited, in a Bad Week for Microsoft (slashdot.org)

2026-05-17 | by Posted | get Microsoft Exchange Server Security Kit → | tags: microsoft exchange server, cve-2026-42897, outlook web access

12.

Amazon Stops Supporting Pre-2013 Kindles Today. Some Owners Turn to Jailbreaking (slashdot.org)

2026-05-17 | by Posted | get Kindle Jailbreak Kit → | tags: amazon, kindle, jailbreaking

13.

Avada Builder WordPress plugin flaws allow site credential theft (bleepingcomputer.com)

2026-05-15 | get WordPress Security Plugin → | tags: avada builder, wordpress, cve-2026-4782

14.

O(x)Caml in Space (news.ycombinator.com)

2026-05-15 | by Thomas Gazagnaire | get O(x)Caml Programming Book → | tags: ocaml, space, ccdes

15.

Microsoft warns of Exchange zero-day flaw exploited in attacks (bleepingcomputer.com)

2026-05-15 | get Microsoft Exchange Security Patch → | tags: exchange server, microsoft, cve-2026-42897

16.

New Nginx Exploit (news.ycombinator.com)

2026-05-14 | get Nginx Security Patch Kit → | tags: nginx, cve-2026-42945, heap buffer overflow

17.

Hackers exploit auth bypass flaw in Burst Statistics WordPress plugin (bleepingcomputer.com)

2026-05-14 | get WordPress Security Plugin → | tags: burst statistics, wordpress plugin, cve-2026-8181

18.

Cisco warns of new critical SD-WAN flaw exploited in zero-day attacks (bleepingcomputer.com)

2026-05-14 | get Cisco SD-WAN Security Kit → | tags: cisco, catalyst sd-wan, cve-2026-20182

19.

18-year-old NGINX vulnerability allows DoS, potential RCE (bleepingcomputer.com)

2026-05-14 | get NGINX Security Patch → | tags: nginx, cve-2026-42945, reverse proxy

20.

New Fragnesia Linux flaw lets attackers gain root privileges (bleepingcomputer.com)

2026-05-14 | get Linux Kernel Security Book → | tags: linux, kernel, fragnasia

21.

CERT is releasing six CVEs for serious security vulnerabilities in dnsmasq (news.ycombinator.com)

2026-05-12 | get Dnsmasq Security Patch Kit → | tags: dnsmasq, cves, cert

22.

Dead.Letter (CVE-2026-45185) – How XBOW found an unauthenticated RCE on Exim (news.ycombinator.com)

2026-05-12 | get Exim Email Server Security Kit → | tags: exim, cve-2026-45185, xbown

23.

Dead.letter (CVE-2026-45185) Humans vs. LLM for Unauthenticated RCE Race on Exim (news.ycombinator.com)

2026-05-12 | get Exim Email Server Security Book → | tags: exim, cve-2026-45185, unauthenticated rce

24.

Fortinet warns of critical RCE flaws in FortiSandbox and FortiAuthenticator (bleepingcomputer.com)

2026-05-12 | get Fortinet FortiSandbox Security Kit → | tags: fortinet, fortisandbox, fortiauthenticator

25.

Incident Report: CVE-2024-YIKES (news.ycombinator.com)

2026-05-10 | by Andrew Nesbitt | get CVE-2024-YIKES Security Patch → | tags: cve-2024-yikes, yubikey, left-justify

26.

Dirty Frag: Universal Linux LPE (news.ycombinator.com)

2026-05-08 | get Linux Privilege Escalation Toolkit → | tags: dirty frag, linux kernel, xfrm-esp

27.

The React2Shell Story (news.ycombinator.com)

2026-05-08 | get React Developer Toolkit → | tags: react, meta, next.js

28.

CISA gives feds four days to patch Ivanti flaw exploited as zero-day (bleepingcomputer.com)

2026-05-08 | get Ivanti Security Patch Kit → | tags: cisa, ivanti, epmm

29.

GNU IFUNC is the real culprit behind CVE-2024-3094 (news.ycombinator.com)

2026-05-08 | get Linux Kernel Security Book → | tags: gnu ifunc, cve-2024-3094, xz-utils

30.

OpenAI launches new voice intelligence features in its API (techcrunch.com)

2026-05-07 | by Lucas Ropek | get OpenAI Voice SDK → | tags: openai, gpt-realtime-2, gpt-realtime-translate