Lucene search
K

12 matches found

The Hacker News
The Hacker News
added 2026/01/14 9:38 a.m.11 views

Microsoft Fixes 114 Windows Flaws in January 2026 Patch, One Actively Exploited

Microsoft on Tuesday rolled out its first security update for 2026, addressing 114 security flaws, including one vulnerability that it said has been actively exploited in the wild. Of the 114 flaws, eight are rated Critical, and 106 are rated Important in severity. As many as 58 vulnerabilities...

8.8CVSS9.2AI score0.06545EPSS
Exploits10
The Hacker News
The Hacker News
added 2024/09/04 1:36 p.m.30 views

Android Users Urged to Install Latest Security Updates to Fix Actively Exploited Flaw

Google has released its monthly security updates for the Android operating system to address a known security flaw that it said has come under active exploitation in the wild. The high-severity vulnerability, tracked as CVE-2024-32896 CVSS score: 7.8, relates to a case of privilege escalation in...

8.1CVSS7.2AI score0.0301EPSS
Exploits0
The Hacker News
The Hacker News
added 2024/08/20 10:25 a.m.47 views

Hackers Exploit PHP Vulnerability to Deploy Stealthy Msupedge Backdoor

A previously undocumented backdoor named Msupedge has been put to use against a cyber attack targeting an unnamed university in Taiwan. "The most notable feature of this backdoor is that it communicates with a command-and-control C&C server via DNS traffic," the Symantec Threat Hunter Team, part ...

9.8CVSS9.9AI score0.99987EPSS
Exploits64
The Hacker News
The Hacker News
added 2023/04/19 1:47 p.m.85 views

Google Chrome Hit by Second Zero-Day Attack - Urgent Patch Update Released

Google on Tuesday rolled out emergency fixes to address another actively exploited high-severity zero-day flaw in its Chrome web browser. The flaw, tracked as CVE-2023-2136, is described as a case of integer overflow in Skia, an open source 2D graphics library. Clément Lecigne of Google's Threat...

9.6CVSS8.3AI score0.40798EPSS
Exploits1
The Hacker News
The Hacker News
added 2023/02/13 3:31 p.m.74 views

Hackers Create Malicious Dota 2 Game Modes to Secretly Access Players' Systems

An unknown threat actor created malicious game modes for the Dota 2 multiplayer online battle arena MOBA video game that could have been exploited to establish backdoor access to players' systems. The modes exploited a high-severity flaw in the V8 JavaScript engine tracked as CVE-2021-38003 CVSS...

8.8CVSS1AI score0.36238EPSS
Exploits2
HackRead
HackRead
added 2022/12/05 2:8 a.m.24 views

App Flaw Allowed Honda and Nissan Cars Hack by Knowing VIN number

By Habiba Rashid According to white hat hacker Sam Curry, once exploited, attackers could use the flaw to unlock the door, honk the horn, flash the lights, or even start the vehicle. This is a post from HackRead.com Read the original post: App Flaw Allowed Honda and Nissan Cars Hack by Knowing VI...

2AI score
Exploits0
The Hacker News
The Hacker News
added 2022/10/12 10:41 a.m.203 views

Critical Bug in Siemens SIMATIC PLCs Could Let Attackers Steal Cryptographic Keys

A vulnerability in Siemens Simatic programmable logic controller PLC can be exploited to retrieve the hard-coded, global private cryptographic keys and seize control of the devices. "An attacker can use these keys to perform multiple advanced attacks against Siemens SIMATIC devices and the relate...

10CVSS1.2AI score0.25455EPSS
Exploits1
Krebs on Security
Krebs on Security
added 2021/04/13 11:12 p.m.90 views

Microsoft Patch Tuesday, April 2021 Edition

Microsoft today released updates to plug at least 110 security holes in its Windows operating systems and other products. The patches include four security fixes for Microsoft Exchange Server -- the same systems that have been besieged by attacks on four separate and zero-day bugs in the email...

10CVSS1.3AI score0.83337EPSS
Exploits4
OSV
OSV
added 2020/07/27 5:47 p.m.14 views

GHSA-67J9-C52G-W2Q9 Authorization Bypass in I hate money

Impact An authenticated member of one project can modify and delete members of another project, without knowledge of this other project's private code. This can be further exploited to access all bills of another project without knowledge of this other project's private code. With the default...

6.9CVSS5AI score0.01029EPSS
Exploits0References5
Krebs on Security
Krebs on Security
added 2019/01/09 2:46 p.m.95 views

Patch Tuesday, January 2019 Edition

Microsoft on Tuesday released updates to fix roughly four dozen security issues with its Windows operating systems and related software. All things considered, this first Patch Tuesday of 2019 is fairly mild, bereft as it is of any new Adobe Flash updates or zero-day exploits. But there are a few...

9.3CVSS0.8AI score0.71365EPSS
Exploits0
Circl
Circl
added 2017/03/20 12:0 a.m.11 views

CVE-2017-0123

creationtimestamp| type| source ---|---|--- 2017-03-20 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41655...

4.3CVSS6.8AI score0.22471EPSS
Exploits1References1
The Hacker News
The Hacker News
added 2012/06/20 5:56 p.m.11 views

Intel CPU Vulnerability can provide control of your system to attacker

Intel CPU Vulnerability can provide control of your system to attacker The U.S. Computer Emergency Readiness Team US-CERT has disclosed a flaw in Intel chips that could allow hackers to gain control of Windows and other operating systems. The flaw has already been exploited on 64-bit versions of...

7.3AI score
Exploits0
Rows per page
Query Builder