Ghost CMS SQL injection campaign has compromised 700+ websites — including Harvard University, Oxford University, and DuckDuckGo — using a CVSS 9.4 flaw to inject ClickFix malware lures that trick ...
Drupal has patched CVE-2026-9082, a highly critical vulnerability that could allow threat actors to hack websites.
CISA has given U.S. government agencies until Wednesday evening to secure their servers against an SQL injection ...
A critical-level flaw in a popular CMS, patched months ago, is now being abused.
A large-scale campaign is exploiting a critical SQL injection vulnerability (CVE-2026-26980) in Ghost CMS to inject malicious ...
Drupal CVE-2026-9082 exploitation hit 15,000 attempts across 65 countries, forcing urgent patches by May 27, 2026.
In its warning, Drupal said a vulnerability in this API allows an attacker to send specially crafted requests resulting in ...
A critical vulnerability in the Cacti Web-based open source framework for monitoring network performance gives attackers a way to disclose Cacti's entire database contents — presenting a prickly risk ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results