Latest news
Vulnerability
PoC Exploit Released for Android Zero-Click CVE-2026-0073 — Silent ADB Shell Access on Android 14–16
13 May 2026 dark6
A public PoC exploit for CVE-2026-0073 enables any network-local attacker to gain a full ADB shell on unpatched Android 14–16...
Vulnerability
cPanelSniper PoC Exploit Released for CVSS 9.8 Flaw CVE-2026-41940 — 44,000 Servers Already Compromised
2 May 2026 dark6
A public proof-of-concept exploit framework called cPanelSniper has been released for CVE-2026-41940, a CVSS 9.8 authentication bypass in cPanel and...
Vulnerability
cPanel Emergency Patch: Critical Authentication Bypass Threatens Millions of Hosted Websites
29 April 2026 dark6
cPanel has issued emergency security patches across all supported versions to address a critical authentication vulnerability in cPanel and WHM...
Vulnerability
Critical CVE-2026-33032 (MCPwn): Actively Exploited nginx-ui Flaw Enables Full Web Server Takeover in Two HTTP Requests
21 April 2026 dark6
CVE-2026-33032 (MCPwn) is a CVSS 9.8 authentication bypass in nginx-ui being actively exploited in the wild. Attackers can seize full...