A critical deserialization vulnerability (CVE-2025-2690) has been discovered in the Yii2 PHP framework, allowing remote code execution....
Red-Team
Zoho Corporation has addressed a medium-severity authentication vulnerability (CVE-2025-1723) in ManageEngine ADSelfService Plus versions 6510 and earlier....
Broadcom has addressed multiple high-severity vulnerabilities in VMware ESXi, Workstation, and Fusion products, as detailed in NCSC...
Summary: IBM has addressed critical security vulnerabilities in its enterprise storage products, including authentication bypass (CVE-2025-0159) and...
SAP has released security updates addressing multiple vulnerabilities across its software portfolio, including SAP Commerce, SAP NetWeaver,...
A critical authorization bypass vulnerability (CVE-2024-53351) has been discovered in PipeCD v0.49, allowing attackers to access service...
A critical SQL injection vulnerability (CVE-2025-30590) has been discovered in the Dourou Flickr set slideshows plugin, affecting...
Summary: Fortinet has disclosed a critical buffer underwrite vulnerability (CVE-2023-25610) affecting multiple versions of FortiOS and FortiProxy,...
A severe security flaw in Next.js, tracked as CVE-2025-29927, allows attackers to bypass authentication and authorization checks...
Microsoft has recently addressed a series of critical vulnerabilities in its Windows operating system, as highlighted in...
Microsoft has recently addressed several critical vulnerabilities in its Azure platform, as reported by the Dutch National...
Fortinet has recently addressed a critical vulnerability affecting multiple products, including FortiOS, FortiProxy, FortiPAM, FortiSRA, and FortiWeb....
Adobe has recently addressed critical vulnerabilities in Adobe Acrobat Reader, as highlighted in the NCSC-2025-0084 advisory. These...
On March 12, 2025, Ivanti announced the resolution of a critical vulnerability in its Ivanti Secure Access...
Autodesk has recently addressed multiple vulnerabilities in its AutoCAD software, a critical tool used by architects, engineers,...
Apache Tomcat, a widely used open-source Java servlet container, has recently addressed a critical vulnerability that could...
Synology has recently addressed a critical vulnerability in its Synology Replication Service and Synology Unified Controller, which...
Synology has recently addressed a critical vulnerability in its DiskStation Manager (DSM) software, specifically within its LDAP...
IBM has recently addressed a critical vulnerability in its IBM InfoSphere Information Server 11.7, as detailed in...
A critical vulnerability (CVE-2025-23120) in Veeam Backup & Replication has been addressed by the vendor. The flaw,...
