Threat Pulse 62High
New public exploits and critical flaws: Cisco Expressway PoC, MongoDB unauthenticated crash, PAN-OS command execution, Red Hat Quay image exposure, GSocket planted on Linux servers, Google Calendar invites used to hijac…
Severity 5ActiveconfirmedWeb servers and gateways

New public exploits and critical flaws: Cisco Expressway PoC, MongoDB unauthenticated crash, PAN-OS command execution, Red Hat Quay image exposure, GSocket planted on Linux servers, Google Calendar invites used to hijack sessions

· 40 h ago · @DarkWebInformer on X
Sources@DarkWebInformer on XThe Hacker News
On X
@DarkWebInformerverifiedNov 12, 19:39 UTC

🚨 Public exploit released for critical Cisco Expressway flaw allowing attackers to gain root access without authentication; CVE-2026-76466 https://github.com/dinosn/cve-2026-76466 A public proof-of-concept (PoC) exploit has been released for a critical Cisco

Open on X
@TheHackersNewsverifiedNov 12, 09:29 UTC

🚨 Just TWO unauthenticated requests can set up a MongoDB server crash. A critical pre-auth flaw (CVE-2026-118383, CVSS 9.5) can crash vulnerable replica set members during failover. No login required. Patches are out. Details:

Open on X
@DarkWebInformerverifiedNov 12, 17:40 UTC

🚨 Palo Alto Networks patches PAN-OS flaw allowing attackers to execute commands with root privileges, CVE-2026-0330 Palo Alto Networks has released security updates for a remote code execution vulnerability in PAN-OS that could allow authenticated administrat

Open on X
@SecurityWeekverifiedNov 12, 09:24 UTC

Critical Red Hat Quay Vulnerability Could Expose Private Container Images

Open on X
@BleepinComputerverifiedNov 12, 09:38 UTC

Hackers plant GSocket on Linux servers for persistent access

Open on X
@TheHackersNewsverifiedNov 12, 11:53 UTC

🚨 Hackers used Google Calendar invites to hijack corporate Google sessions, even after victims approved genuine MFA prompts. The trick: trusted Google links and live phishing proxies that captured authenticated sessions. 897 attacker domains taken down. Ins

Open on X
Why this score

Plan rubric with caps (verified sweep, Nov 12)

Back to the board

Updated Nov 14, 03:49 UTC. Refreshes on its own.

Add a threat

Paste a link to an advisory, an article or an X post. A person reads every submission before it shows; nothing posts on its own.

Share

The picture people see when the link is posted
Post on XSave picture

This picture is what X, iMessage, Slack and Facebook show under the link. It is drawn fresh from the live board: the board and chart pictures update every 10 minutes, an event picture follows that event.