vulnerability

Ivanti Secure Access Client Vulnerability Patched: NCSC-2025-0085 Explained

Blue-Team
CVE News

Ivanti Secure Access Client Vulnerability Patched: NCSC-2025-0085 Explained

On March 12, 2025, Ivanti announced the resolution of a critical vulnerability in its Ivanti Secure Access...

Autodesk AutoCAD Vulnerabilities Patched: Key Details and Remediation Steps

Exploitation
Threat Intelligence

Autodesk AutoCAD Vulnerabilities Patched: Key Details and Remediation Steps

Autodesk has recently addressed multiple vulnerabilities in its AutoCAD software, a critical tool used by architects, engineers,...

Critical Vulnerability Patched in Apache Tomcat: CVE-2025-24813 Allows Remote Code Execution

CVE News
Exploitation

Critical Vulnerability Patched in Apache Tomcat: CVE-2025-24813 Allows Remote Code Execution

Apache Tomcat, a widely used open-source Java servlet container, has recently addressed a critical vulnerability that could...

Synology Patches Critical Vulnerability in Replication Service and Unified Controller (NCSC-2025-0090)

Exploitation
Red-Team

Synology Patches Critical Vulnerability in Replication Service and Unified Controller (NCSC-2025-0090)

Synology has recently addressed a critical vulnerability in its Synology Replication Service and Synology Unified Controller, which...

Synology Patches Critical LDAP Vulnerability in DiskStation Manager (CVE-2024-10444)

CVE News
Exploitation

Synology Patches Critical LDAP Vulnerability in DiskStation Manager (CVE-2024-10444)

Synology has recently addressed a critical vulnerability in its DiskStation Manager (DSM) software, specifically within its LDAP...

IBM InfoSphere Information Server Vulnerability (CVE-2024-51459) Patched: Medium Risk, High Impact

CVE News
Exploitation

IBM InfoSphere Information Server Vulnerability (CVE-2024-51459) Patched: Medium Risk, High Impact

IBM has recently addressed a critical vulnerability in its IBM InfoSphere Information Server 11.7, as detailed in...

Critical Vulnerability Patched in Veeam Backup & Replication: CVE-2025-23120

Blue-Team
CVE News

Critical Vulnerability Patched in Veeam Backup & Replication: CVE-2025-23120

A critical vulnerability (CVE-2025-23120) in Veeam Backup & Replication has been addressed by the vendor. The flaw,...

Active Exploitation of Critical Vulnerability in Palo Alto PAN-OS: CVE-2024-3400

CVE News
Exploitation

Active Exploitation of Critical Vulnerability in Palo Alto PAN-OS: CVE-2024-3400

The Dutch National Cyber Security Centre (NCSC) has recently observed active exploitation of a critical vulnerability in...

NCSC.nl Warns of Cl0p Ransomware Campaigns Targeting File Transfer Systems

Exploitation
Threat Intelligence

NCSC.nl Warns of Cl0p Ransomware Campaigns Targeting File Transfer Systems

The Nationaal Cyber Security Centrum (NCSC) of the Netherlands has issued a warning regarding a series of cyberattacks...

Critical Vulnerabilities in FortiOS and FortiProxy Lead to Ransomware Attacks: NCSC Warns of Exploitation

CVE News
Exploitation

Critical Vulnerabilities in FortiOS and FortiProxy Lead to Ransomware Attacks: NCSC Warns of Exploitation

The National Cyber Security Centre (NCSC) has reported a significant surge in ransomware attacks targeting critical vulnerabilities...

Vulnerability Scanning: Essential Strategies for Modern Cybersecurity

Blue-Team
Red-Team

Vulnerability Scanning: Essential Strategies for Modern Cybersecurity

In today’s rapidly evolving cybersecurity landscape, vulnerability scanning has become a cornerstone of effective security management. With...

NCSC Warns of Cryptojacking: How Malicious Software is Exploiting Devices for Illicit Cryptocurrency Mining

Blue-Team
Exploitation

NCSC Warns of Cryptojacking: How Malicious Software is Exploiting Devices for Illicit Cryptocurrency Mining

The National Cyber Security Centre (NCSC) has issued a warning about the increasing use of malicious software...

Maximizing Penetration Testing: A Comprehensive Guide for Cybersecurity Professionals

Blue-Team
Exploitation

Maximizing Penetration Testing: A Comprehensive Guide for Cybersecurity Professionals

Penetration testing, often referred to as pentesting, is a critical component of modern cybersecurity strategies. It involves...

CVE-2025-2691: High-Severity SSRF Vulnerability in Nossrf Package

Blue-Team
CVE News
Exploitation
Red-Team
Threat Intelligence

CVE-2025-2691: High-Severity SSRF Vulnerability in Nossrf Package

A critical Server-Side Request Forgery (SSRF) vulnerability (CVE-2025-2691) has been identified in the nossrf package, affecting versions...

CVE-2025-2609 – MagnusSolution MagnusBilling Cross-Site Scripting Vulnerability

Bug Bounties & Responsible Disclosure
Cyber Laws & Regulations
Exploitation
Malware Analysis
Red-Team
SIEM & Detection Engineering

CVE-2025-2609 – MagnusSolution MagnusBilling Cross-Site Scripting Vulnerability

A critical vulnerability, CVE-2025-2609, has been identified in MagnusSolution’s MagnusBilling software, a widely used billing and call...

CVE-2024-9880 – Apache Pandas Command Injection Vulnerability

Exploitation

CVE-2024-9880 – Apache Pandas Command Injection Vulnerability

A high-severity vulnerability, CVE-2024-9880, has been identified in the Apache Pandas library, a cornerstone of data analysis...

CVE-2025-0628 – BerriAI Litellm Privilege Escalation Vulnerability

Exploitation

CVE-2025-0628 – BerriAI Litellm Privilege Escalation Vulnerability

A critical privilege escalation vulnerability, CVE-2025-0628, has been identified in the BerriAI/litellm application. This flaw allows users...

CVE-2024-9701 – Kedro ShelveStore Remote Code Execution Vulnerability

Exploitation

CVE-2024-9701 – Kedro ShelveStore Remote Code Execution Vulnerability

A critical vulnerability, CVE-2024-9701, has been identified in the Kedro ShelveStore class (version 0.19.8), a component of...

CVE-2024-9919 – Parisneo Lollms Webui Missing Authentication Check Directory Traversal Vulnerability

Exploitation

CVE-2024-9919 – Parisneo Lollms Webui Missing Authentication Check Directory Traversal Vulnerability

A high-severity vulnerability, CVE-2024-9919, has been identified in the parisneo/lollms-webui software, specifically in version V13. This vulnerability...

CVE-2025-2303 – Block Logic – WordPress Full Gutenberg Block Display Control Remote Code Execution

Exploitation

CVE-2025-2303 – Block Logic – WordPress Full Gutenberg Block Display Control Remote Code Execution

TL;DR CVE-2025-2303: A critical vulnerability in the Block Logic WordPress plugin allows authenticated attackers with Contributor-level access...

Posts pagination

Previous 1 … 4 5 6 7 8 Next

vulnerability

Ivanti Secure Access Client Vulnerability Patched: NCSC-2025-0085 Explained

Autodesk AutoCAD Vulnerabilities Patched: Key Details and Remediation Steps

Critical Vulnerability Patched in Apache Tomcat: CVE-2025-24813 Allows Remote Code Execution

Synology Patches Critical Vulnerability in Replication Service and Unified Controller (NCSC-2025-0090)

Synology Patches Critical LDAP Vulnerability in DiskStation Manager (CVE-2024-10444)

IBM InfoSphere Information Server Vulnerability (CVE-2024-51459) Patched: Medium Risk, High Impact

Critical Vulnerability Patched in Veeam Backup & Replication: CVE-2025-23120

Active Exploitation of Critical Vulnerability in Palo Alto PAN-OS: CVE-2024-3400

NCSC.nl Warns of Cl0p Ransomware Campaigns Targeting File Transfer Systems

Critical Vulnerabilities in FortiOS and FortiProxy Lead to Ransomware Attacks: NCSC Warns of Exploitation

Vulnerability Scanning: Essential Strategies for Modern Cybersecurity

Maximizing Penetration Testing: A Comprehensive Guide for Cybersecurity Professionals

CVE-2025-2691: High-Severity SSRF Vulnerability in Nossrf Package

CVE-2025-2609 – MagnusSolution MagnusBilling Cross-Site Scripting Vulnerability

CVE-2024-9880 – Apache Pandas Command Injection Vulnerability

CVE-2025-0628 – BerriAI Litellm Privilege Escalation Vulnerability

CVE-2024-9701 – Kedro ShelveStore Remote Code Execution Vulnerability

CVE-2024-9919 – Parisneo Lollms Webui Missing Authentication Check Directory Traversal Vulnerability

CVE-2025-2303 – Block Logic – WordPress Full Gutenberg Block Display Control Remote Code Execution

You may have missed

YesWiki Path Traversal Vulnerability (CVE-2025-31131): Technical Analysis and Mitigation

Critical SQL Injection Vulnerability in Next-Cart Store to WooCommerce Migration Plugin (CVE-2025-30807)

WpTravelly Plugin Vulnerability Exposes WordPress Sites to Object Injection Attacks

Critical SQL Injection Vulnerability in WooCommerce Order Splitter Plugin (CVE-2025-31089)