Watch FloorOct 7, 8:00 PM to Oct 8, 8:00 PM ET
Daily brief, Thursday, October 8, 2026
5 newly exploited, 2 new critical CVEs.
Breaking
Nothing spreading fast in technology large companies run.
Newly exploited in the wild
- 10.0CVE-2015-3306 ProFTPD ProFTPDCISA KEVDetectionAn attacker can read and write arbitrary files on a ProFTPD server.
- 9.8CVE-2021-3199 ONLYOFFICE DocsCISA KEVONLYOFFICE Docs contains a path traversal vulnerability that can occur when JWT is used, via a /.. sequence in an image upload parameter and could allow for remote code execution.
- 8.1CVE-2016-3081 Apache StrutsCISA KEVDetectionAn attacker can execute remote code in Apache Struts.
- 7.5CVE-2015-5477 ISC BINDCISA KEVDetectionRemote attackers cause a denial of service with ISC BIND.
- 7.2CVE-2023-22894 Strapi StrapiCISA KEVAn attacker with access to the admin panel can discover sensitive user details on Strapi.
New public exploit code
No new Nuclei templates, Metasploit modules, Exploit-DB or VulnCheck XDB entries.
New critical CVEs
- 10.0CVE-2015-3306 ProFTPD ProFTPDKEVexploit codeDetectionAn attacker can read and write arbitrary files on a ProFTPD server.
- 9.8CVE-2021-3199 ONLYOFFICE DocsKEVONLYOFFICE Docs contains a path traversal vulnerability that can occur when JWT is used, via a /.. sequence in an image upload parameter and could allow for remote code execution.
Ransomware
No leak-site posts collected.
New data breaches
No new breaches published.
Watch Floor collects CVE records, CISA KEV, exploit indexes, official advisories, security news and chatter. Ransomware posts are criminal groups' claims, not confirmed by the victims. Breaking stories as RSS or JSON. watchfloor.fyi
Powered by MikeGPT