VulnCheck KEV: CVE-2026-49060

Incorrect Privilege Assignment vulnerability in Hippoo Mobile App for WooCommerce allows Privilege Escalation. This issue affects Hippoo Mobile App for WooCommerce: from n/a through 1.9.4...

RondoDox Botnet Exploits Critical 2018 Vulnerability to Hijack ASUS Routers

Cybersecurity firm VulnCheck reveals hackers are using a critical 2018 vulnerability to bypass authentication and hack over a million ASUS routers...

VulnCheck KEV: CVE-2026-42208

LiteLLM is a proxy server AI Gateway to call LLM APIs in OpenAI or native format. From version 1.81.16 to before version 1.83.7, a database query used during proxy API key checks mixed the caller-supplied key value into the query text instead of passing it as a separate parameter. An...

VulnCheck KEV: CVE-2026-4047

A vulnerability is present in Qinglong due to improperly matching case sensitive paths used by middleware authenticaion but the underlying Express.js framework treats paths case insensitively...

VulnCheck KEV: CVE-2023-36899

ASP.NET Elevation of Privilege Vulnerability...

VulnCheck KEV: CVE-2024-28916

Xbox Gaming Services Elevation of Privilege Vulnerability...

VulnCheck KEV: CVE-2024-44309

Apple iOS, macOS, and other Apple products contain an unspecified vulnerability when processing maliciously crafted web content that may lead to a cross-site scripting XSS attack...

VulnCheck KEV: CVE-2024-26234

Proxy Driver Spoofing Vulnerability...

VulnCheck KEV: CVE-2019-3010

Oracle Solaris component: XScreenSaver contains an unspecified vulnerability that allows for privilege escalation...

VulnCheck KEV: CVE-2021-34484

Microsoft Windows User Profile Service contains an unspecified vulnerability that allows for privilege escalation...

VulnCheck KEV: CVE-2019-7287

Apple iOS contains a memory corruption vulnerability which could allow an attacker to perform remote code execution...