CVE Tools
Track your stack

Security news, decoded.

74 stories in the last 7 days, naming 204 CVEs; 60 of those CVEs are in CISA KEV.

RSS feed

The wire

Page 36 of 36 · newest first · times in UTC

Wednesday, Mar 182 stories

  1. watchTowr Labs
    The Most Organized Threat Actors Use Your ITSM (BMC FootPrints Pre-Auth Remote Code Execution Chains)PoC publicFootPrints
  2. Mandiant
    The Proliferation of DarkSword: iOS Exploit Chain Adopted by Multiple Threat ActorsReported exploitediOS

Monday, Mar 161 story

  1. Mandiant
    Ransomware Tactics, Techniques, and Procedures in a Shifting Threat LandscapeResearch

Tuesday, Mar 101 story

  1. ESET WeLiveSecurity
    Sednit reloaded: Back in the trenchesReported exploitedBeardShell

Monday, Mar 91 story

  1. Bishop Fox
    Pre-Authentication SQL Injection in FortiClient EMS 7.4.4 - CVE-2026-21643Reported exploitedFortiClient EMS

Friday, Mar 61 story

  1. GitHub Security Lab
    How to scan for vulnerabilities with GitHub Security Lab’s open source AI-powered frameworkResearchGitHub Security Lab Taskflow Agent

Thursday, Mar 51 story

  1. Mandiant
    Look What You Made Us Patch: 2025 Zero-Days in ReviewReported exploitedGTIG zero-day tracking

Tuesday, Mar 32 stories

  1. watchTowr Labs
    Sometimes, You Can Just Feel The Security In The Design (Juniper Junos Evolved CVE-2026-21902 Pre-Auth RCE)PatchJunos OS Evolved (PTX Series)
  2. Mandiant
    Coruna: The Mysterious Journey of a Powerful iOS Exploit KitReported exploitediOS exploit kit Coruna

Thursday, Feb 261 story

  1. Google Project Zero
    A Deep Dive into the GetProcessHandleFromHwnd APIPoC publicWindows

Wednesday, Feb 251 story

  1. watchTowr Labs
    Buy A Help Desk, Bundle A Remote Access Solution? (SolarWinds Web Help Desk Pre-Auth RCE Chain(s))PoC publicSolarWinds Web Help Desk

Tuesday, Feb 171 story

  1. Mandiant
    UNC6201 Exploiting a Dell RecoverPoint for Virtual Machines Zero-DayReported exploitedDell RecoverPoint for Virtual Machines

Friday, Jan 302 stories

  1. watchTowr Labs
    Someone Knows Bash Far Too Well, And We Love It (Ivanti EPMM Pre-Auth RCEs CVE-2026-1281 & CVE-2026-1340)Reported exploitedIvanti Endpoint Manager Mobile (EPMM)
  2. ESET WeLiveSecurity
    This month in security with Tony Anscombe – January 2026 editionRoundupServiceNow

Thursday, Jan 291 story

  1. Patchstack
    SQL Injection Vulnerability in Quiz and Survey Master (QSM) Plugin Affecting 40k+ SitesPatchQuiz and Survey Master (QSM) WordPress plugin

Thursday, Jan 222 stories

  1. Patchstack
    Critical Arbitrary File Upload Vulnerability in RealHomes CRM Plugin Affecting 30k+ SitesPatchRealHomes CRM plugin
  2. watchTowr Labs
    Attackers With Decompilers Strike Again (SmarterTools SmarterMail WT-2026-0001 Auth Bypass)Reported exploitedSmarterMail

Wednesday, Jan 143 stories

  1. Google Project Zero
    A 0-click exploit chain for the Pixel 9 Part 3: Where do we go from here?PoC publicPixel 9
  2. Google Project Zero
    A 0-click exploit chain for the Pixel 9 Part 1: Decoding DolbyPoC publicPixel 9
  3. Patchstack
    Critical Privilege Escalation Vulnerability in Modular DS plugin affecting 40k+ Sites exploited in the wildReported exploitedModular DS plugin

Thursday, Jan 81 story

  1. watchTowr Labs
    Do Smart People Ever Say They’re Smart? (SmarterTools SmarterMail Pre-Auth RCE CVE-2025-52691)ResearchSmarterMail

Monday, Dec 221 story

  1. ESET WeLiveSecurity
    Revisiting CVE‑2025‑50165: A critical flaw in Windows Imaging ComponentResearchWindows Imaging Component (WindowsCodecs.dll)

Wednesday, Dec 171 story

  1. Patchstack
    Critical Arbitrary File Upload Vulnerability in Motors Theme Affecting 20k+ SitesPatchMotors theme

Wednesday, Dec 101 story

  1. watchTowr Labs
    SOAPwn: Pwning .NET Framework Applications Through HTTP Client Proxies And WSDLPoC public.NET Framework

Thursday, Dec 41 story

  1. Bishop Fox
    Arista Firewall XSS to RCE ChainResearchNext Generation Firewall (NGFW)

Friday, Nov 141 story

  1. watchTowr Labs
    When The Impersonation Function Gets Used To Impersonate Users (Fortinet FortiWeb Auth. Bypass CVE-2025-64446)Reported exploitedFortiWeb

Wednesday, Nov 121 story

  1. watchTowr Labs
    Is It CitrixBleed4? Well, No. Is It Good? Also, No. (Citrix NetScaler Memory Leak & RXSS CVE-2025-12101)ResearchCitrix NetScaler

Thursday, Oct 231 story

  1. ESET WeLiveSecurity
    Gotta fly: Lazarus targets the UAV sectorReported exploitedESET

Thursday, Jun 261 story

  1. Bishop Fox
    Sitecore Experience Platform Vulnerabilities: Critical Update Needed for Versions 10.1 to 10.3AdvisorySitecore Experience Platform

Wednesday, Jun 251 story

  1. Bishop Fox
    Sipping from the CVE Firehose: How We Prioritize Emerging Threats for Real-World ImpactResearch

Friday, Mar 211 story

  1. Bishop Fox
    SonicWall-CVE2024-53704: Exploit Details BlogReported exploitedSSL VPN component

Tuesday, Mar 181 story

  1. Bishop Fox
    Tomcat CVE-2025-24813: What You Need to Know BlogPoC publicApache Tomcat

Monday, Feb 101 story

  1. Bishop Fox
    SonicWall CVE-2024-53704: SSL VPN Session HijackingPoC publicSonicOS

Friday, Dec 131 story

  1. Bishop Fox
    State of SonicWall Exposure: Firmware Decryption Unlocks New InsightsResearchSonicOS

Friday, Nov 11 story

  1. Bishop Fox
    A Deeper Look at FortiJump (FortiManager CVE-2024-47575)Reported exploitedFortiManager

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store