Critical security advisoryCriticalFlagged by our vulnerability database: PHP2Shell is on CISA’s exploited list. Most WordPress hosting runs PHP. See if your site is affectedFlagged by our vulnerability database: PHP2Shell is being exploited. DetailsExploited: PHP2Shell. Check your site
HuttenlocherTechnologies
Updated 10 h ago

Vulnerability database

Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.

1,762exploited flaws on CISA’s list
34added in the last 30 days
343new WordPress flaws this week
390,080entries in the database

2,515 results · page 1 of 51

  • Oct 6, 2026Memory corruption while processing service requests.CVE-2026-57559 · Computers, phones & browsers · Qualcomm, Inc. · reported by product-security@qualcomm.comHigh 7.8

    Memory corruption while processing service requests.

    Product
    Snapdragon
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 6, 2026Memory Corruption when executing system service routines due to improper handling of user input buffers.CVE-2026-57555 · Computers, phones & browsers · Qualcomm, Inc. · reported by product-security@qualcomm.comHigh 7.8

    Memory Corruption when executing system service routines due to improper handling of user input buffers.

    Product
    Snapdragon
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 6, 2026Memory Corruption when asynchronous threads access shared performance counter data simultaneously during FastRPC invocations.CVE-2026-57554 · Computers, phones & browsers · Qualcomm, Inc. · reported by product-security@qualcomm.comHigh 7.8

    Memory Corruption when asynchronous threads access shared performance counter data simultaneously during FastRPC invocations.

    Product
    Snapdragon
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 6, 2026Transient DOS when processing a continuous receive command with a zero-sized global configuration override.CVE-2026-57546 · Computers, phones & browsers · Qualcomm, Inc. · reported by product-security@qualcomm.comHigh 7.5

    Transient DOS when processing a continuous receive command with a zero-sized global configuration override.

    Product
    Snapdragon
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 6, 2026Memory corruption when processing draw objects of incorrect type during graphics command list execution.CVE-2026-57545 · Computers, phones & browsers · Qualcomm, Inc. · reported by product-security@qualcomm.comHigh 7.8

    Memory corruption when processing draw objects of incorrect type during graphics command list execution.

    Product
    Snapdragon
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 6, 2026Memory Corruption when accessing and modifying geographic mapping data concurrently without proper synchronization.CVE-2026-57537 · Computers, phones & browsers · Qualcomm, Inc. · reported by product-security@qualcomm.comHigh 7.8

    Memory Corruption when accessing and modifying geographic mapping data concurrently without proper synchronization.

    Product
    Snapdragon
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 6, 2026Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted anCVE-2026-25302 · Computers, phones & browsers · Qualcomm, Inc. · reported by product-security@qualcomm.comHigh 7.1

    Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted and processed.

    Product
    Snapdragon
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 6, 2026Memory corruption when performing concurrent operations on shared memory page lists due to lack of proper synchronization mechanisms.CVE-2026-25291 · Computers, phones & browsers · Qualcomm, Inc. · reported by product-security@qualcomm.comHigh 7.8

    Memory corruption when performing concurrent operations on shared memory page lists due to lack of proper synchronization mechanisms.

    Product
    Snapdragon
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 6, 2026Memory Corruption when processing concurrent DMA buffer allocation and deallocation commands without proper synchronization.CVE-2026-25274 · Computers, phones & browsers · Qualcomm, Inc. · reported by product-security@qualcomm.comMedium 6.7

    Memory Corruption when processing concurrent DMA buffer allocation and deallocation commands without proper synchronization.

    Product
    Snapdragon
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 6, 2026Memory Corruption when processing camera operations due to out-of-bounds write during driver updates.CVE-2026-25273 · Computers, phones & browsers · Qualcomm, Inc. · reported by product-security@qualcomm.comMedium 6.7

    Memory Corruption when processing camera operations due to out-of-bounds write during driver updates.

    Product
    Snapdragon
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 6, 2026Memory Corruption when processing camera CRE driver operations with improper handling of buffer limits during hardware update preparation.CVE-2026-25272 · Computers, phones & browsers · Qualcomm, Inc. · reported by product-security@qualcomm.comMedium 6.7

    Memory Corruption when processing camera CRE driver operations with improper handling of buffer limits during hardware update preparation.

    Product
    Snapdragon
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 6, 2026Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver.CVE-2026-25270 · Computers, phones & browsers · Qualcomm, Inc. · reported by product-security@qualcomm.comMedium 6.7

    Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver.

    Product
    Snapdragon
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 6, 2026Memory corruption when processing camera requests with excessive batch and IO buffer configurations exceeds allocated memory size.CVE-2026-25269 · Computers, phones & browsers · Qualcomm, Inc. · reported by product-security@qualcomm.comMedium 6.7

    Memory corruption when processing camera requests with excessive batch and IO buffer configurations exceeds allocated memory size.

    Product
    Snapdragon
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 6, 2026Memory corruption when non-secure loader rewrites page tables before secure memory initialization.CVE-2026-25267 · Computers, phones & browsers · Qualcomm, Inc. · reported by product-security@qualcomm.comHigh 7.8

    Memory corruption when non-secure loader rewrites page tables before secure memory initialization.

    Product
    Snapdragon
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 6, 2026Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters.CVE-2026-25263 · Computers, phones & browsers · Qualcomm, Inc. · reported by product-security@qualcomm.comMedium 6.6

    Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters.

    Product
    Snapdragon
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 22, 2026Privilege escalation due to weak configuration while temporary file handling.CVE-2026-25265 · Computers, phones & browsers · Qualcomm, Inc. · reported by product-security@qualcomm.comHigh 8.8

    Privilege escalation due to weak configuration while temporary file handling.

    Product
    Snapdragon
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 22, 2026Privilege escalation due to weak configuration during package extraction process.CVE-2026-25264 · Computers, phones & browsers · Qualcomm, Inc. · reported by product-security@qualcomm.comHigh 8.8

    Privilege escalation due to weak configuration during package extraction process.

    Product
    Snapdragon
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 22, 2026Memory corruption while processing a crafted ELF file in the Primary Bootloader.CVE-2026-25262 · Computers, phones & browsers · Qualcomm, Inc. · reported by product-security@qualcomm.comMedium 6.9

    Memory corruption while processing a crafted ELF file in the Primary Bootloader.

    Product
    Snapdragon
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 22, 2026Exposed dangerous function lead to privilege escalation via gRPC server.CVE-2026-25255 · Computers, phones & browsers · Qualcomm, Inc. · reported by product-security@qualcomm.comHigh 8.8

    Exposed dangerous function lead to privilege escalation via gRPC server.

    Product
    Snapdragon
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 22, 2026Improper authorization leads to Remote Code Execution via SocketIO interface.CVE-2026-25254 · Computers, phones & browsers · Qualcomm, Inc. · reported by product-security@qualcomm.comCritical 9.8

    Improper authorization leads to Remote Code Execution via SocketIO interface.

    Product
    Snapdragon
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 17, 2026Transient DOS while parsing frame during channel usage.CVE-2026-25294 · Computers, phones & browsers · Qualcomm, Inc. · reported by product-security@qualcomm.comHigh 7.4

    Transient DOS while parsing frame during channel usage.

    Product
    Snapdragon
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 17, 2026Memory Corruption when validating large data buffers from external sources using addition to check buffer length.CVE-2026-25290 · Computers, phones & browsers · Qualcomm, Inc. · reported by product-security@qualcomm.comHigh 7.8

    Memory Corruption when validating large data buffers from external sources using addition to check buffer length.

    Product
    Snapdragon
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 17, 2026Information Disclosure when a pointer is reused after being deallocated.CVE-2026-25284 · Computers, phones & browsers · Qualcomm, Inc. · reported by product-security@qualcomm.comHigh 7.3

    Information Disclosure when a pointer is reused after being deallocated.

    Product
    Snapdragon
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 17, 2026Memory Corruption when copying unverified data from an external source exceeds the allocated buffer size.CVE-2026-25283 · Computers, phones & browsers · Qualcomm, Inc. · reported by product-security@qualcomm.comHigh 8.8

    Memory Corruption when copying unverified data from an external source exceeds the allocated buffer size.

    Product
    Snapdragon
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 17, 2026Transient DOS when processing unverified data from a neighboring system causes out of bound memory access.CVE-2026-25282 · Computers, phones & browsers · Qualcomm, Inc. · reported by product-security@qualcomm.comHigh 7.9

    Transient DOS when processing unverified data from a neighboring system causes out of bound memory access.

    Product
    Snapdragon
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 17, 2026Transient DOS when processing large or numerous request buffers without sufficient memory allocation validation.CVE-2026-25281 · Computers, phones & browsers · Qualcomm, Inc. · reported by product-security@qualcomm.comHigh 7.4

    Transient DOS when processing large or numerous request buffers without sufficient memory allocation validation.

    Product
    Snapdragon
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 17, 2026Memory corruption when processing escape handling flow with insufficient user buffer sizes.CVE-2026-25280 · Computers, phones & browsers · Qualcomm, Inc. · reported by product-security@qualcomm.comHigh 7.8

    Memory corruption when processing escape handling flow with insufficient user buffer sizes.

    Product
    Snapdragon
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 17, 2026Memory Corruption when processing I2C transfer requests due to a race condition between memory allocation and data copying.CVE-2026-25278 · Computers, phones & browsers · Qualcomm, Inc. · reported by product-security@qualcomm.comHigh 7.8

    Memory Corruption when processing I2C transfer requests due to a race condition between memory allocation and data copying.

    Product
    Snapdragon
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 17, 2026Transient DOS when processing authentication frames with invalid FILS information element header lengths.CVE-2026-25275 · Computers, phones & browsers · Qualcomm, Inc. · reported by product-security@qualcomm.comHigh 7.5

    Transient DOS when processing authentication frames with invalid FILS information element header lengths.

    Product
    Snapdragon
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 17, 2026Memory corruption while processing rear sensor IOCTL calls.CVE-2026-25261 · Computers, phones & browsers · Qualcomm, Inc. · reported by product-security@qualcomm.comMedium 6.7

    Memory corruption while processing rear sensor IOCTL calls.

    Product
    Snapdragon
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 17, 2026Transient DOS when processing a channel map with insufficient used channels and adaptive frequency hopping is fully enabled.CVE-2026-24081 · Computers, phones & browsers · Qualcomm, Inc. · reported by product-security@qualcomm.comHigh 7.4

    Transient DOS when processing a channel map with insufficient used channels and adaptive frequency hopping is fully enabled.

    Product
    Snapdragon
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 17, 2026Memory Corruption when multiple threads issue concurrent IOCTL requests to the device control handler due to improper synchronization and race conditions.CVE-2026-24075 · Computers, phones & browsers · Qualcomm, Inc. · reported by product-security@qualcomm.comHigh 7.8

    Memory Corruption when multiple threads issue concurrent IOCTL requests to the device control handler due to improper synchronization and race conditions.

    Product
    Snapdragon
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 17, 2026Memory Corruption when processing data with large offset and length values exceeds buffer limits during data copy operations.CVE-2026-24074 · Computers, phones & browsers · Qualcomm, Inc. · reported by product-security@qualcomm.comHigh 7.8

    Memory Corruption when processing data with large offset and length values exceeds buffer limits during data copy operations.

    Product
    Snapdragon
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 17, 2026Memory corruption when processing decode statistics due to insufficient validation of offset against structure size.CVE-2026-24073 · Computers, phones & browsers · Qualcomm, Inc. · reported by product-security@qualcomm.comHigh 7.8

    Memory corruption when processing decode statistics due to insufficient validation of offset against structure size.

    Product
    Snapdragon
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 17, 2026Memory Corruption when copying large input data exceeds normal allocation limits.CVE-2025-59607 · Computers, phones & browsers · Qualcomm, Inc. · reported by product-security@qualcomm.comHigh 7.8

    Memory Corruption when copying large input data exceeds normal allocation limits.

    Product
    Snapdragon
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Aug 4, 2026Memory Corruption when processing untrusted user input in the fastboot command handler for audio framework configuration.CVE-2026-25292 · Computers, phones & browsers · Qualcomm, Inc. · reported by product-security@qualcomm.comHigh 7.6

    Memory Corruption when processing untrusted user input in the fastboot command handler for audio framework configuration.

    Product
    Snapdragon
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Aug 4, 2026Memory Corruption when processing Device Capability Extended attributes in certain NAN Service Discovery Frames with invalid length values.CVE-2026-25289 · Computers, phones & browsers · Qualcomm, Inc. · reported by product-security@qualcomm.comCritical 9.6

    Memory Corruption when processing Device Capability Extended attributes in certain NAN Service Discovery Frames with invalid length values.

    Product
    Snapdragon
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Aug 4, 2026Transient DOS when processing a short target wake time channel usage response frame with insufficient packet size.CVE-2026-25288 · Computers, phones & browsers · Qualcomm, Inc. · reported by product-security@qualcomm.comHigh 7.4

    Transient DOS when processing a short target wake time channel usage response frame with insufficient packet size.

    Product
    Snapdragon
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Aug 4, 2026Weak configuration when UE does not verify the consistency of its additional security capabilities with the replayed capabilities.CVE-2026-24084 · Computers, phones & browsers · Qualcomm, Inc. · reported by product-security@qualcomm.comHigh 7.5

    Weak configuration when UE does not verify the consistency of its additional security capabilities with the replayed capabilities.

    Product
    Snapdragon
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Aug 4, 2026Memory Corruption while processing IOCTL device driver requests with invalid arguments.CVE-2026-24083 · Computers, phones & browsers · Qualcomm, Inc. · reported by product-security@qualcomm.comHigh 7.8

    Memory Corruption while processing IOCTL device driver requests with invalid arguments.

    Product
    Snapdragon
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Aug 4, 2026Memory Corruption when handling malformed request parameters in the fingerprint TA.CVE-2026-24080 · Computers, phones & browsers · Qualcomm, Inc. · reported by product-security@qualcomm.comHigh 7.8

    Memory Corruption when handling malformed request parameters in the fingerprint TA.

    Product
    Snapdragon
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Aug 4, 2026Cryptographic Issue while processing registration requests with malformed or missing authentication parameters.CVE-2026-24079 · Computers, phones & browsers · Qualcomm, Inc. · reported by product-security@qualcomm.comHigh 8.1

    Cryptographic Issue while processing registration requests with malformed or missing authentication parameters.

    Product
    Snapdragon
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Aug 4, 2026Information Disclosure when IPSec negotiation fails or is not established properly during NG-eCall SIP signaling.CVE-2026-24078 · Computers, phones & browsers · Qualcomm, Inc. · reported by product-security@qualcomm.comMedium 6.5

    Information Disclosure when IPSec negotiation fails or is not established properly during NG-eCall SIP signaling.

    Product
    Snapdragon
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Aug 4, 2026Information Disclosure when processing wireless network channel switch information with improperly formatted length fields.CVE-2026-24077 · Computers, phones & browsers · Qualcomm, Inc. · reported by product-security@qualcomm.comMedium 6.5

    Information Disclosure when processing wireless network channel switch information with improperly formatted length fields.

    Product
    Snapdragon
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Aug 4, 2026Memory Corruption when processing registry values with incorrect types using a direct query method.CVE-2026-24076 · Computers, phones & browsers · Qualcomm, Inc. · reported by product-security@qualcomm.comMedium 6.7

    Memory Corruption when processing registry values with incorrect types using a direct query method.

    Product
    Snapdragon
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Aug 4, 2026Memory corruption while processing a packet with a size close to the maximum allowed value.CVE-2026-21366 · Computers, phones & browsers · Qualcomm, Inc. · reported by product-security@qualcomm.comHigh 7.8

    Memory corruption while processing a packet with a size close to the maximum allowed value.

    Product
    Snapdragon
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 21, 2026A local privilege escalation vulnerability exists in snap-confine, a set-capabilities core component used internally by Canonical snapd to construct the secure CVE-2026-8933 · Other software · Canonical · reported by security@ubuntu.comHigh 7.8

    A local privilege escalation vulnerability exists in snap-confine, a set-capabilities core component used internally by Canonical snapd to construct the secure execution environment for snap applications. This vulnerability uniquely affects versions of snap-confine configured with set-capabilities (rather than standard set-uid-root installations). Due to a flaw in how privilege boundaries or security sandboxes are initialized when the binary runs under limited ambient capabilities, a local, unprivileged attacker can exploit this behavior to bypass intended restrictions and execute arbitrary code. Successful exploitation allows the local user to elevate their privileges to full root authority.

    Product
    Ubuntu 26.04 LTS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 21, 2026A sandbox confinement bypass vulnerability exists in Canonical snapd within its internal execution environment compiler (snap-confine).CVE-2026-15226 · Other software · Canonical · reported by security@ubuntu.comHigh 8.4

    A sandbox confinement bypass vulnerability exists in Canonical snapd within its internal execution environment compiler (snap-confine). The default seccomp security templates generated by the engine to restrict system calls do not filter or reject process operations capable of creating or manipulating file execution flags with set-user-ID attributes. Consequently, an application running within a strictly confined snap environment can successfully compile or drop binaries and apply setuid properties to them. If a compromised or malicious process inside the snap sandbox executes these generated setuid binaries, it can potentially circumvent architectural sandboxing assumptions, drop intended restriction policies, or execute privileged actions inside the container namespace that should otherwise be strictly blocked. The vulnerability has been resolved by hardening the seccomp template engine to block the execution and creation of setuid executables by sandboxed snap processes.

    Product
    Ubuntu 26.04 LTS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 21, 2026An access control bypass and information disclosure vulnerability exists in the base AppArmor security profile configuration of Canonical snapd.CVE-2024-5300 · Other software · Canonical · reported by security@ubuntu.comMedium 5.6

    An access control bypass and information disclosure vulnerability exists in the base AppArmor security profile configuration of Canonical snapd. The abstraction rules located in /etc/apparmor.d/abstractions/nss-systemd (inherited via ) inadvertently permit strictly confined snap applications, which lack the privileged account-control interface, to interact directly with the io.systemd.Multiplexer and io.systemd.NameServiceSwitch UNIX domain sockets under /run/systemd/userdb/. On systems where the systemd-userdbd service is installed and operational, the service fails to distinguish between an unconfined root user on the host system and a restricted root user running within a snap application's sandbox (such as a daemon or configuration hook). Because systemd-userdbd returns "complete" user records—including sensitive hashed user passwords from /etc/shadow—when queried by a process running as root, a compromised or malicious strictly confined snap executing code as root can successfully query the Varlink interface to retrieve all system password hashes, bypassing intended snap sandbox restrictions. This issue is mitigated by the fact that systemd-userdbd is not installed by default

    Product
    Ubuntu 26.04 LTS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 19, 2026In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix shrinker deadlock With PROVE_LOCKING on an Snapdragon X1 and VM reclaim pressCVE-2026-64100 · Computers, phones & browsers · Linux · reported by 416baaa9-dc9f-4396-8d5f-8c081fb06d67Medium 5.5

    In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix shrinker deadlock With PROVE_LOCKING on an Snapdragon X1 and VM reclaim pressure, we see: ====================================================== WARNING: possible circular locking dependency detected 7.0.0-debug+ #43 Tainted: G W ------------------------------------------------------ kswapd0/82 is trying to acquire lock: ffff800080ec3870 (reservation_ww_class_acquire){+.+.}-{0:0}, at: msm_gem_shrinker_scan+0x17c/0x400 [msm] but task is already holding lock: ffffc31709b263b8 (fs_reclaim){+.+.}-{0:0}, at: balance_pgdat+0x88/0x988 which lock already depends on the new lock. the existing dependency chain (in reverse order) is: -> #2 (fs_reclaim){+.+.}-{0:0}: __lock_acquire+0x4d0/0xad0 lock_acquire.part.0+0xc4/0x248 lock_acquire+0x8c/0x248 fs_reclaim_acquire+0xd0/0xf0 dma_resv_lockdep+0x224/0x348 do_one_initcall+0x84/0x5d0 do_initcalls+0x194/0x1d8 kernel_init_freeable+0x128/0x180 kernel_init+0x2c/0x160 ret_from_fork+0x10/0x20 -> #1 (reservation_ww_class_mutex

    Product
    Linux
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.

Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.

Weekly security brief

The flaws that hit local websites, every Friday.

One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.

Get in touch

Tell us what you're building.

A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.

01The person who'll do the work writes back
02A short call, then a written plan with the price
03Nothing starts until you say yes
04Hacked or down right now? Call, and we pick up the same day
843-331-6339

Not ready to talk yet? Run the free website check and see what Google sees.

What do you need?
Build
Grow
Protect
Urgent

No newsletter, no sales sequence. Just a reply.