Critical n8n Flaw (CVSS 9.9) Enables Arbitrary Code Execution Across Thousands of Instances (opens in new tab)

Most trusted, widely-read independent cybersecurity news source for everyone; supported by hackers and IT professionals — Send TIPs to admin@thehackernews.com

Hackers Exploit Gravity SMTP WordPress Plugin Bug to Expose API Keys1d1 day ago

Unpatchable 'usbliter8' Exploit Breaks Apple A12 and A13 SecureROM Boot Chain1d1 day ago

The Gentlemen RaaS Uses GentleKiller EDR Framework Targeting 400 Security Processes1d1 day ago

+41 more in the past week

Cybersecurity gl.pgs.sh

MongoDB Vulnerability CVE-2025-14847 Under Active Exploitation Worldwide24w24 weeks ago

MongoBleed Detector Tool Released to Detect MongoDB Vulnerability(CVE-2025-14847)24w24 weeks ago

Hackers Claim Breach of WIRED Database Containing 2.3 million Subscriber Records24w24 weeks ago

top scoring links : selfhosted reddit.com

A place to share, discuss, discover, assist with, gain assistance for, and critique self-hosted alternatives to our favorite web apps, web services, and online tools.

My beginner Proxmox homelab built on recycled hardware1w1 week ago

0xevn/xray-reality-setup: Automated Xray VLESS + REALITY + XTLS-Vision installer for Alpine and Debian/Ubuntu Linux. Interactive setup with SSH hardening, firewall configuration, BBR optimization, and privacy-first defaults1w1 week ago

Show HN: Maxun – Open-Source No-Code Web Data Extraction Platform1w1 week ago

+92 more in the past month

Self-Hosted Alternatives to Popular Services reddit.com

A place to share, discuss, discover, assist with, gain assistance for, and critique self-hosted alternatives to our favorite web apps, web services, and online tools.

How to Get Easy access to Jellyfin Server with URL?3d3 days ago

You (probably) don't need TLS_insecure_skip_verify3d3 days ago

A Re-boot of my program, finally got a dedicated domain.5d5 days ago

+4 more in the past week