Skip to content

  • Home
  • Tools
    • IOC Defang/Refang Tool
    • Universal Encoder Decoder
    • File Hash Calculator
    • Password Crack Time Simulator
    • Multi-URL IOC Checker
  • CyberSecurity News
  • Latest Cyber Attack
  • Vulnerabilities
  • Threat Advisories
  • MITRE ATT&CK
    • Collection
    • Command and Control
    • Credential Access
    • Defense Evasion
    • Discovery
    • Execution
    • Exfiltration
    • Impact
    • Initial Access
    • Lateral Movement
    • Persistence
    • Privilege Escalation
    • Reconnaissance
    • Resource Development
  • Ransomware
  • Malware
  • Cyber Kill Chain

  • Home
  • Tools
    • IOC Defang/Refang Tool
    • Universal Encoder Decoder
    • File Hash Calculator
    • Password Crack Time Simulator
    • Multi-URL IOC Checker
  • CyberSecurity News
  • Latest Cyber Attack
  • Vulnerabilities
  • Threat Advisories
  • MITRE ATT&CK
    • Collection
    • Command and Control
    • Credential Access
    • Defense Evasion
    • Discovery
    • Execution
    • Exfiltration
    • Impact
    • Initial Access
    • Lateral Movement
    • Persistence
    • Privilege Escalation
    • Reconnaissance
    • Resource Development
  • Ransomware
  • Malware
  • Cyber Kill Chain

Vulnerabilities

CVE-2026-23523: One Click to Command Execution — Critical Deeplink RCE in Dive MCP Desktop App

  • Vulnerabilities
AegironJanuary 17, 2026January 17, 20269 mins0
CVE ID: CVE-2026-23523Product: Dive – MCP Host Desktop ApplicationAffected versions: All versions prior to 0.13.0Fixed version: 0.13.0…
continue reading..

Unauthenticated Admin Access Discovered: CVE-2026-23800 Actively Threatens Modular DS WordPress Sites

  • Vulnerabilities
AegironJanuary 17, 2026January 17, 20268 mins0
Executive Summary CVE ID: CVE-2026-23800Product: Modular DS – modular-connector (WordPress plugin component)Vulnerability Type: Incorrect Privilege Assignment /…
continue reading..

EasyDiscuss Joomla Component Exposed: Stored XSS Vulnerabilities Allow Malicious Script Execution Across User Sessions

  • Vulnerabilities
AegironJanuary 17, 2026January 17, 20268 mins0
Product: EasyDiscuss (Joomla discussion/forum component)Vendor: StackIdeasAffected Area: User profile avatar text handling and forum post renderingImpact: Stored…
continue reading..

Critical Windows Security Vulnerabilities: LSASS Remote Code Execution and VBS Enclave Privilege Escalation (CVE-2026-20854 & CVE-2026-20876)

  • CyberSecurity News
CyberDefenderJanuary 17, 2026January 17, 20269 mins0
CVE-2026-20854 affects the Windows Local Security Authority Subsystem Service (LSASS), a critical process responsible for handling user…
continue reading..

Critical Windows Kernel Privilege Escalation via Graphics Component Use-After-Free (CVE-2026-20822)

  • CyberSecurity News
CyberDefenderJanuary 17, 2026January 17, 20267 mins0
Product Name: Microsoft WindowsAffected Component: Windows Graphics Component (Microsoft Graphics Kernel Subsystem)Vulnerability Type: Elevation of Privilege (Use-After-Free)Attack…
continue reading..

Critical Microsoft Office Remote Code Execution Vulnerabilities in Word and Excel (CVE-2026-20944, CVE-2026-20955, CVE-2026-20957)

  • CyberSecurity News
CyberDefenderJanuary 17, 2026January 17, 20268 mins0
CVE-2026-20944, CVE-2026-20955, and CVE-2026-20957 are critical remote code execution vulnerabilities affecting Microsoft Word and Microsoft Excel, posing…
continue reading..

CVE-2026-20952 and CVE-2026-20953 Two Critical Remote Code Execution Vulnerabilities in Microsoft Office

  • CyberSecurity News
CyberDefenderJanuary 17, 2026January 17, 202615 mins0
CVE-2026-20952 and CVE-2026-20953 are critical remote code execution (RCE) vulnerabilities affecting Office. Both vulnerabilities carry a CVSS…
continue reading..

Cisco Patches Actively Exploited AsyncOS Zero-Day in Email Security Appliances

  • CyberSecurity News
CyberDefenderJanuary 17, 2026January 17, 20263 mins0
Cisco has fixed a serious zero-day flaw (CVE-2025-20393) in its AsyncOS software that attackers have been actively…
continue reading..

OPSWAT Unit 515 Discovers Critical Unauthenticated Remote Vulnerabilities in Delta DVP PLCs Affecting Industrial Control Systems

  • CyberSecurity News
CyberDefenderJanuary 16, 2026January 16, 20268 mins0
Multiple critical vulnerabilities were identified in Delta DVP-12SE11T PLCs running firmware prior to v2.16. These flaws exist…
continue reading..

Silent Packets, Sudden Crashes: Wireshark Parser Flaws That Can Bring Analysis to a Halt

  • Vulnerabilities
AegironJanuary 16, 2026January 16, 20268 mins0
Product: WiresharkWhere the issue lives: Protocol dissectors (the small parsers that decode each protocol layer)What breaks: Input…
continue reading..
  • 1
  • …
  • 46
  • 47
  • 48
  • 49
  • 50
  • …
  • 82

Recent Posts

  • Ransomware Group ‘Gentlemen’ Industrializes EDR Evasion with Kernel-Le…
    Jun 22, 2026
  • SmartApeSG Compromises Okendo Reviews Widget, Exposing Thousands of E-…
    Jun 22, 2026
  • Cybercriminals Exploit Fake Microsoft Teams Transcripts to Deploy Pers…
    Jun 22, 2026
  • Thousands Targeted, Hundreds Compromised: Inside the FortiBleed Creden…
    Jun 22, 2026
  • Novel GhoLoader malware campaign detected, using unique ’10 mous…
    Jun 22, 2026
  • INC Ransomware Emerges as a Major Global Cyber Threat, Rapidly Expandi…
    Jun 19, 2026
  • Dropping Elephant Deploys Advanced Fileless Malware, Neutralizing AMSI…
    Jun 19, 2026
  • ShinyHunters Exploits Oracle PeopleSoft Zero-Day, Compromises Universi…
    Jun 19, 2026
  • Cybercriminals Weaponize Wallpaper Engine to Hijack Steam Accounts in …
    Jun 19, 2026
  • AI-Powered ClickFix Campaign Targets Brazilian Banks, Deploys SmartRAT…
    Jun 19, 2026

Popular Posts

No posts found.

Find Me On

©Cyber Security P1 News. All Rights Reserved.
  • Contact
  • Privacy Policy
  • Terms of Service