The Apache Software Foundation has released patches for six security flaws impacting its digital identity software. These...
Vulnerability Report
TL;DR Google issued version 153 for its Chrome browser. The release fixes 42 security defects. Three of...
Security researchers have disclosed a severe proxy-addr IP spoofing flaw affecting popular Node.js applications. This misconfiguration vulnerability,...
IBM X-Force has disclosed two security vulnerabilities in Langflow OSS, including a severe Langflow SSRF flaw. The...
Three Squid proxy vulnerabilities expose networks to request smuggling and stack buffer overflow attacks. Network administrators must...
WHMCS released maintenance updates resolving two critical WHMCS vulnerabilities on September 3, 2026. The flaws allow unauthenticated...
TL;DR Cisco resolved five security flaws affecting its email gateways and management controllers. Four vulnerabilities carry critical...
TL;DR Cisco confirmed active attacks on a critical Cisco Secure Email Gateway vulnerability. Tracked as CVE-2026-76461, it...
Acronis Threat Research Unit researchers uncovered a state-linked espionage campaign exploiting a critical Gitea RCE vulnerability. A...
Executive Summary Attackers are actively targeting two critical vulnerabilities in The Events Calendar to achieve remote code...
TL;DR A KGUARD DVR vulnerability now tracked as CVE-2026-87827 carries a maximum CVSS score of 10.0. It...
TL;DR Attackers are mass-scanning the internet for exposed Vite development servers. They abuse the Vite development server...
TL;DR Threat actors are actively exploiting a critical flaw in the WooCommerce Wholesale Lead Capture plugin across...
Check Point Research published a technical analysis, revealing a stealthy prompt injection method. The newly documented Puzzlemask...
TL;DR Acronis fixed a high-severity Acronis cPanel plugin vulnerability in its Backup plugin for cPanel and WHM....
TL;DR A critical static code injection flaw allows unauthenticated remote attackers to execute arbitrary commands on N-central...
TL;DR The Apache Software Foundation addressed seventeen distinct vulnerabilities impacting Apache Storm version 3.0.0. These flaws enable...
At a Glance Security researchers at Gen Threat Labs discovered a critical remote code execution flaw in...
ConnectWise released an emergency security patch today to address a critical ConnectWise ScreenConnect vulnerability. The severe flaw...
Progress Software published a critical security bulletin, disclosing a maximum-severity flaw. The newly identified Chef Automate vulnerability...
The Apache Software Foundation released patches addressing three critical Apache Camel K vulnerabilities. These flaws allow attackers...
Amazon released a security update addressing a critical server-side request forgery vulnerability in the AWS Systems Manager...