Vulnerabilities & Exploits page 2

43 Articles

Vulnerabilities & ExploitsJun 10, 2026·4 min read

Microsoft Patches Record 200 Vulnerabilities in June 2026 Patch Tuesday

Microsoft's June 2026 Patch Tuesday fixes a record 200 vulnerabilities, including a critical Active Directory RCE (CVE-2026-45648, CVSS 8.8).

Vulnerabilities & ExploitsJun 10, 2026·3 min read

Microsoft June 2026 Security Updates

Microsoft's Urgent Security Update Microsoft has just released a massive security update, fixing 204 vulnerabilities, including 38 critical ones. This is a...

Vulnerabilities & ExploitsJun 9, 2026·3 min read

SAP fixes critical flaws in NetWeaver and Commerce Cloud

Uncovering Critical Flaws in SAP NetWeaver and Commerce Cloud SAP's June 2026 Security Patch package is a big deal. It fixes 15 vulnerabilities, including...

Vulnerabilities & ExploitsJun 6, 2026·2 min read

CISA Flags SolarWinds Serv-U Flaw as Exploited

Over 12,000 SolarWinds Serv-U file transfer servers sit exposed to the internet. Attackers are already knocking them offline.

Vulnerabilities & ExploitsJun 6, 2026·2 min read

Cisco SD-WAN Manager Under Attack, No Patch Yet

Cisco has confirmed active exploitation of a high-severity vulnerability in Catalyst SD-WAN Manager. The flaw, CVE-2026-20245, scores 7.8 on the CVSS scale.

Vulnerabilities & ExploitsJun 6, 2026·2 min read

Everest Forms Pro RCE: WordPress Sites at Risk

Hackers are actively exploiting a critical vulnerability in the Everest Forms Pro WordPress plugin right now. The flaw, tracked as CVE-2026-3300, allows unauthenticated attackers to execute arbitrary ...

Vulnerabilities & ExploitsJun 6, 2026·2 min read

Ubiquiti UniFi OS Auth Bypass Enables Root RCE

Ubiquiti disclosed three critical vulnerabilities in UniFi OS Server on May 21, 2026. Each scores a perfect 10.0 on the CVSS scale.

Vulnerabilities & ExploitsJun 4, 2026·2 min read

Acer Addresses Zero-Day in Wave 7 Routers

The vulnerability allows unauthenticated attackers to access sensitive credentials from log archives. It's a broken access control flaw, which enables attackers to obtain plaintext credentials.

Vulnerabilities & ExploitsJun 4, 2026·3 min read

B&R PPT30 Operating System

This operating system is widely used in industrial automation worldwide. The issue affects versions prior to 1.8.0.

Vulnerabilities & ExploitsJun 4, 2026·2 min read

ELI5: YellowKey (CVE-2026-45585) BitLocker Bypass that survived the Great Global CrowdStrike Outage of 24)

The vulnerability, identified as CVE-2026-45585, has significant implications for organizations using Windows PE, versions 10 and 11, and CrowdStrike, versions 6.0 and later.

Vulnerabilities & ExploitsJun 4, 2026·2 min read

CISA Adds Magento RCE CVE-2026-45247 to KEV

This vulnerability, tracked as CVE-2026-45247, has a CVSS score of 9.8. Cybersecurity and Infrastructure Security Agency added this flaw to its Known Exploited Vulnerabilities catalog.

Vulnerabilities & ExploitsJun 4, 2026·2 min read

Cisco Unified Comms Manager Vuln & PoC Released Code

This vulnerability, identified as CVE-2026-20230, has a CVSS score of 8.6. That's a significant threat.

Vulnerabilities & ExploitsJun 4, 2026·4 min read

Hitachi Energy ITT600 Explorer

The vulnerability, identified as CVE-2024-8176, can be exploited to carry out a Denial of Service attack on the product, potentially disrupting essential services in the energy sector.

Vulnerabilities & ExploitsJun 3, 2026·2 min read

Google Patches Android Zero-Day CVE-2025-48595

One flaw, CVE-2025-48595, is particularly alarming. This vulnerability has a CVSS score of 8.4.

Vulnerabilities & ExploitsJun 3, 2026·2 min read

CISA Adds Android & Linux Kernel Flaws to KEV catalog

Cybersecurity and Infrastructure Security Agency, CISA, has just added two significant vulnerabilities to its Known Exploited Vulnerabilities catalog.

Vulnerabilities & ExploitsMay 31, 2026·3 min read

Rapid7: PAN-OS GlobalProtect Bypass Exploited

Attackers are actively exploiting a high-severity authentication bypass vulnerability in Palo Alto Networks GlobalProtect portals and gateways, allowing remote attackers to establish unauthorized VPN access to corporate networks.

Vulnerabilities & ExploitsMay 14, 2023·3 min read

Leading Vulnerability Scanners: Benefits & Uses

Leading vulnerability scanners provide comprehensive security assessment and management capabilities, allowing organizations to identify and remediate potential vulnerabilities in their IT infrastructure. From real-time scanning to automated reporting, these tools offer a range of benefits and use cases, helping businesses to mitigate risks, meet compliance requirements, and enhance overall security posture.

Vulnerabilities & ExploitsSep 10, 2022·5 min read

Dufflebag

A tool called [Dufflebag ](<https://github.com/bishopfox/dufflebag)developed by [dan-bishopfox Dan Petro](<https://github.com/dan-bishopfox) and [bmoar Ben Morris](<https://github.com/bmoar

Vulnerabilities & ExploitsJan 16, 2022·9 min read

MITRE ATT&CK October 2021 Update: New Techniques

MITRE ATT&CK® is a globally accessible knowledge base of adversary tactics and techniques based on real-world observations. The ATT&CK knowledge base is used as a foundation for the development of ...

Vulnerabilities & ExploitsSep 7, 2021·1 min read

Useful Pentesting Resources

A curated list of useful penetration testing resources, tools, and references for security professionals.

Security Digest

Get the latest cybersecurity news, vulnerability alerts, and threat intelligence delivered to your inbox.