Browsing Category
Vulnerability
110 posts
Node.js Security Releases: Patching Node2Shell (CVE-2026-111497) & High Risks
HOC Shorts | Node.js security issuing updates across active release channels (v22.x, v24.x, and v26.x), patching multiple vulnerabilities…
How to Find and Exploit JWT Token Vulnerabilities
By HOC Team | Updated: October 2026 | Read time: ~18 min JSON Web Tokens (JWTs) have become…
Critical PHP RCE Vulnerabilities: Update to PHP 8.5.12, 8.4.27 Immediately
HOC Shorts | The Emergency Release: The PHP development team issued an emergency security update covering PHP 8.5.12,…
Google Halt Open Source Bug Bounties – AI “Slop” Flood
HOC Shorts Google officially suspended product vulnerability reports under its Open Source Software Vulnerability Reward Program (OSS VRP).…
Apple Security Advisory – Patches 100+ Vulnerabilities Across iOS, macOS and Other Devices
HOC Shorts Apple security advisory has releases cataloged on its official security portal. The major updates address over…
Critical Ruby on Rails Vulnerability Under Active Attack | CVE-2026-66066
Cyber threat actors have begun actively exploiting a critical-severity in Ruby on Rails vulnerability, months after security researchers…
GitLab Released GraphQL Vulnerability (CVE-2026-19478) Emergency Patch
GitLab released an emergency, out-of-band security update to address a critical access control flaw affecting self-managed instances of…
LiteLLM Supply Chain Breach: How a 40-Minute Hack Exposed 2,500+ Companies
The 2026 LiteLLM Supply Chain Breach Explained: How a 40-Minute Hack Exposed 2,500+ Companies. A research report by…
Critical cPanel Flaw Lets Hosting Users Grab Database Root Access | CVE-2026-58048
A critical security vulnerability patched in cPanel could allow authenticated web hosting users to cross privilege boundaries and…
WP2Shell: Why Millions of WordPress Sites Are at Risk | CVE-2026-63030
The CVE-2026-63030 – “wp2shell”: Why Millions of WordPress Sites Are Vulnerable and Emergency to Patch If you run…