CVE-2026-71398 - adobe campaign classic Adobe Campaign Classic's authorization system is flawed, allowing attackers to execute malicious code as the current user. This could lead to sensitive data being compromised or… Too many irrelevant or confusing CVEs? Use stackflag.com
CVE-2026-48381 - adobe campaign classic Adobe Campaign Classic is affected by a security flaw that could allow an attacker to execute malicious code on a server. This could lead to unauthorized access or data theft.… Too many irrelevant or confusing CVEs? Use stackflag.com
CVE-2026-73211 - peertube PeerTube's database security was compromised, allowing unauthorized access to sensitive data and administrative accounts. This issue has been fixed in version 8.1.6, so update… Too many irrelevant or confusing CVEs? Use stackflag.com
CVE-2026-27302 - adobe campaign classic Adobe Campaign Classic allows unauthorized code to be executed by an attacker, potentially leading to data theft or system compromise. This vulnerability can be exploited without… Too many irrelevant or confusing CVEs? Use stackflag.com
CVE-2026-48362 - coldfusion 2025 An attacker can run unauthorized code on your ColdFusion server without needing user interaction, potentially causing damage or disruption. This vulnerability affects… Too many irrelevant or confusing CVEs? Use stackflag.com
CVE-2026-71384 - coldfusion 2025 This issue affects a component of is, which is typically restricted to an administrative network. An attacker could bypass security measures to gain unauthorized access,… Too many irrelevant or confusing CVEs? Use stackflag.com
The Kimwolf botnet, which lives on cheap Android TV boxes, has a new version that dresses its attack traffic up as ordinary web browsing. It also rebuilt its command infrastructure on the Ethereum blockchain and Tor after being knocked offline twice.
🌑 HADAL · actively exploited critical CVE-2025-42999: SAP NetWeaver Visual Composer Metadata Uploader is vulnerable when a privileged user can upload untrusted or malicious conten… CVSS 9.1 · EPSS 11.3% · CISA KEV https://beta.vulnsea.com/cve/CVE-2025-42999
🌑 HADAL · actively exploited critical CVE-2024-23692: Rejetto HTTP File Server, up to and including version 2.3m, is vulnerable to a template injection vulnerability CVSS 9.8 · EPSS 99.5% · CISA KEV https://beta.vulnsea.com/cve/CVE-2024-23692
🌊 ABYSSAL · critical with a public exploit CVE-2023-2008: A flaw was found in the Linux kernel's udmabuf device driver, within a fault handler CVSS 8.2 · EPSS 1.0% · 0day https://beta.vulnsea.com/cve/CVE-2023-2008
🌊 ABYSSAL · critical with a public exploit CVE-2021-40444: Microsoft is investigating reports of a remote code execution vulnerability in MSHTML that affects Microsoft Wind… CVSS 8.8 · EPSS 97.5% · CISA KEV · 0day https://beta.vulnsea.com/cve/CVE-2021-40444
🌊 ABYSSAL · critical with a public exploit CVE-2021-38649: Open Management Infrastructure Elevation of Privilege Vulnerability CVSS 7 · EPSS 2.9% · CISA KEV https://beta.vulnsea.com/cve/CVE-2021-38649
🔴 Flowco-inc.com found on Settra's leak site 📍 United States · Other · 11 Aug 2026 🏴 Settra has listed 31 victims since June 2026. https://cyberthreatintelligence.net/ransomware-victim/flowco-inc-com-settra-2026
CVE-2026-65791 - windows 10 version 1607 The Windows iSCSI Target Service is affected by a vulnerability that could allow an attacker to execute malicious code on a computer from another network location. This… Too many irrelevant or confusing CVEs? Use stackflag.com
CVE-2026-70306 - microsoft sharepoint enterprise server 2016 An attacker can create fake web pages in Microsoft Office SharePoint, tricking users into revealing sensitive information or performing malicious… Too many irrelevant or confusing CVEs? Use stackflag.com
DEF CON Franklin and the NRWA have launched the Water Watch Center following a suspected widespread nation-state cyberattack on water utilities.
CVE-2026-62878 - windows 10 version 1607 An attacker can execute malicious code on your DNS server if they gain access to it. This is a serious concern because an attacker could then access and control your… Too many irrelevant or confusing CVEs? Use stackflag.com
CVE-2026-62893 - windows 10 version 1607 An attacker can execute malicious code on a Windows Deployment Services server, potentially taking control of the server. This could allow the attacker to access sensitive… Too many irrelevant or confusing CVEs? Use stackflag.com
#Cybersecurity #ITSecurity #InfoSec #CyberNews #Hacking #EthicalHackingNews
Malicious Solidity Pro VS Code extensions stole crypto wallets and API keys from developers by using delayed activation and string obfuscation to evade scanners.
🌊 ABYSSAL · critical with a public exploit CVE-2021-38648: Open Management Infrastructure Elevation of Privilege Vulnerability CVSS 7.8 · EPSS 11.4% · CISA KEV https://beta.vulnsea.com/cve/CVE-2021-38648
🌑 HADAL · actively exploited critical CVE-2021-38647: Open Management Infrastructure (OMI) Remote Code Execution Vulnerability CVSS 9.8 · EPSS 99.9% · CISA KEV https://beta.vulnsea.com/cve/CVE-2021-38647
🌊 ABYSSAL · critical with a public exploit CVE-2021-38646: Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability CVSS 7.8 · EPSS 8.0% · CISA KEV https://beta.vulnsea.com/cve/CVE-2021-38646