Exploit Security News
Public exploit code, proof-of-concept releases, and technical exploitation write-ups for known vulnerabilities.
Once a vulnerability is disclosed, the risk changes sharply the moment working exploit code becomes public — turning a theoretical bug into something any attacker can weaponize. This feed tracks proof-of-concept releases, exploitation write-ups and additions to exploit frameworks as they appear. A published exploit is usually the signal that patching moves from "should" to "urgent".
Recent Exploit items
CVE-2026-86218 N-central is vulnerable to a pre-auth remote code execution This issue affects N-central: before 2026.3.1.14. 🎖
CVE-2026-86207 An authentication bypass in N-central < 2026.3 HF 3 leads to authentication bypass in internal only APIs 🎖
Other topics
CVE
Recent CVE identifiers and vulnerability disclosures aggregated from security feeds — new CVE IDs, published advisories, and the vendors and products they affect.
Ransomware
Ransomware attacks, extortion group activity, victim disclosures and decryptor releases tracked as they are reported.
Phishing
Phishing campaigns, credential-harvesting kits, and social-engineering techniques used to compromise users and organizations.
Zero-Day
Zero-day vulnerabilities being actively exploited before a patch exists, and the fixes that follow.
Data Breach
Confirmed and reported data breaches — what was exposed, which organizations were affected, and how the incident came to light.
Patch
Vendor patches, security updates and fix releases for previously disclosed vulnerabilities.