PoC

Cisco Unified CM flaw actively exploited to drop webshells (CVE-2026-20230)

June 24, 2026

CVE-2026-20230, a server-side request forgery (SSRF) vulnerability affecting Cisco’s Unified Communications Manager (Unified CM), is being exploited to drop webshells …

Researchers release details, PoC for exploited Check Point VPN flaw (CVE-2026-50751)

June 12, 2026

WatchTowr researchers have disclosed a technical analysis and a “Detection Artefact Generator” for CVE-2026-50751, an authentication bypass flaw in Check …

Windows Netlogon RCE exploited, domain controllers at risk (CVE-2026-41089)

June 1, 2026

CVE-2026-41089, a critical Windows Netlogon RCE flaw that allows remote code execution, is now actively exploited in the wild, the Centre for Cybersecurity Belgium (CCB) …

Microsoft provides mitigation for “YellowKey” BitLocker bypass flaw (CVE-2026-45585)

May 20, 2026

Microsoft is working on a fix for CVE-2026-45585 (aka “Yellowkey”), a vulnerability that can be used by attackers to bypass protections offered by BitLocker, the …

Attackers are exploiting critical NGINX vulnerability (CVE-2026-42945)

May 18, 2026

A critical NGINX vulnerability (CVE-2026-42945) disclosed last week is being exploited by attackers, VulnCheck security researcher Patrick Garrity revealed on Saturday. The …

Fragnesia: New Linux kernel LPE bug was spawned by Dirty Frag patch (CVE-2026-46300)

May 14, 2026

Researchers have found and disclosed yet another local privilege escalation (LPE) vulnerability in the Linux kernel: CVE-2026-46300, aka “Fragnesia”. The flaw is …

cPanel zero-day exploited for months before patch release (CVE-2026-41940)

April 30, 2026

A critical authentication bypass vulnerability (CVE-2026-41940) in cPanel, a popular web-based control panel for managing web hosting accounts, is being exploited by attackers …

Nine-year-old Linux kernel flaw enables reliable local privilege escalation (CVE-2026-31431)

April 30, 2026

Security researchers at Theori have disclosed a high-severity local privilege escalation (LPE) vulnerability (CVE-2026-31431) in the Linux kernel. The flaw, nicknamed …

Researcher drops two more Microsoft Defender zero-days, all three now exploited in the wild

April 17, 2026

The security researcher who earlier this month published a proof-of-concept (PoC) exploit for a zero-day privilege escalation vulnerability in Microsoft Defender is back with …

BlueHammer: Windows zero-day exploit leaked

April 8, 2026

A buggy but functional proof-of-concept (PoC) exploit for an unpatched Windows local privilege escalation vulnerability dubbed BlueHammer has been published on GitHub by …

FreeScout vulnerability enables unauthenticated, zero-click RCE via email (CVE-2026-28289)

March 5, 2026

A newly discovered vulnerability (CVE-2026-28289) in the open-source help desk platform FreeScout could allow attackers to take over vulnerable servers by sending a specially …

Hackers probe, exploit newly patched BeyondTrust RCE flaw (CVE-2026-1731)

February 13, 2026

Attackers are exploiting a recently patched critical vulnerability (CVE-2026-1731) in internet-facing BeyondTrust Remote Support and Privileged Remote Access instances. …

PoC