A critical WordPress Core exploit chain called WP2Shell, disclosed in July 2026, lets unauthenticated attackers run code on ...
Two newly disclosed vulnerabilities in Discourse let unauthenticated attackers execute JavaScript against anonymous visitors ...
Hackers use public blockchains as C2 channels for supply chain malware, evading domain blocks and stealing cloud credentials.
Roundcube SQL injection CVE-2026-48842 is now being exploited in the wild, putting unpatched webmail servers at risk of database compromise.
A high-severity Roundcube Webmail vulnerability patched in May is now being actively exploited in attacks, according to the Canadian Centre for Cyber Security.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results