On December 3, 2025, the React and Next.js ecosystems were alerted to a maximum-severity vulnerability enabling unauthenticated...
Remote Code Execution
A widespread campaign known as ShadowRay is actively exploiting a critical, yet officially disputed, vulnerability in the...
A critical security vulnerability in the XWiki Platform, tracked as CVE-2025-24893, is now being actively exploited by...
A critical vulnerability in Gladinet’s Triofox file-sharing platform has been actively exploited by threat actors to bypass...
SAP has released its November 2025 security updates, a critical patch batch addressing 18 new security notes...
Security researchers have identified a new zero-day attack campaign targeting Zimbra Collaboration Suite (ZCS) that leverages malicious...
Networking hardware manufacturer DrayTek is confronting a significant security crisis involving multiple vulnerabilities in its Vigor router...
Western Digital has released firmware updates to address a critical-severity vulnerability in multiple My Cloud Network Attached...
Fortra has issued an urgent security advisory concerning a newly identified vulnerability in its GoAnywhere Managed File...
Microsoft’s September 2025 Patch Tuesday has been released, addressing a total of 81 security vulnerabilities across its...
A critical vulnerability in Docker Desktop for Windows and macOS, designated CVE-2025-9074, has been patched after it...
Google has patched a critical vulnerability that allowed attackers to remotely compromise Gemini AI agents through malicious...
Proof-of-concept (PoC) exploits for a critical SQL injection (SQLi) vulnerability in Fortinet FortiWeb have been publicly released,...
Four vulnerabilities in OpenSynergy’s BlueSDK Bluetooth stack, collectively dubbed PerfektBlue, have been identified as affecting vehicles from...
Cisco has issued an urgent security advisory regarding two critical remote code execution (RCE) vulnerabilities affecting its...
BeyondTrust has issued critical security updates to address a high-severity Server-Side Template Injection (SSTI) vulnerability in its...
A critical vulnerability chain in Sitecore Experience Platform (XP) allows attackers to gain full server control starting...
Trend Micro has released urgent security updates addressing multiple critical-severity vulnerabilities in its Apex Central and Endpoint...
Microsoft’s June 2025 Patch Tuesday has arrived, delivering security updates for 66 vulnerabilities, including one actively exploited...
Hewlett Packard Enterprise (HPE) has issued an urgent security bulletin warning of eight vulnerabilities in its StoreOnce...
