Do Son
TL;DR Google shipped a Chrome security update on August 26, 2026. It fixes 15 vulnerabilities, including two...
Vulnerability Report
D-Link patched 15 flaws in its DWR-M961 router this month. Most are D-Link router command injection bugs,...
TL;DR A researcher released proof-of-concept exploit code for CVE-2026-68138, a race condition in the Linux kernel traffic-control...
TL;DR: MongoDB security vulnerabilities now total 32 disclosed flaws across MongoDB Server, the BI Connector ODBC Driver,...
TL;DR: Apache disclosed two Apache HttpClient TLS vulnerabilities in its HttpComponents Client library this month. The more...
TL;DR A default MLflow tracking server can be turned into a proxy for reading internal services. Tracked...
TL;DR JetBrains fixed eight security flaws in YouTrack, its issue-tracking platform. The most serious, CVE-2026-75045, is rated...
TL;DR A GeoServer unauthenticated SQL injection flaw is under active attack. It lives in the jsonArrayContains filter...
TL;DR Microsoft patched CVE-2026-66804, an elevation of privilege flaw in the Windows Cross Device Service. A standard...
TL;DR A billing flaw in New API, a popular open-source AI API gateway, is under active attack....
TL;DR A critical flaw in Forminator Forms puts more than 600,000 WordPress sites at risk. Tracked as...
TL;DR GitLab shipped an out-of-band critical patch on August 17, 2026. It fixes CVE-2026-19478, a GraphQL code...
TL;DR BigBlueButton contains a critical path traversal vulnerability within the Etherpad integration. Attackers can perform an unauthenticated...
TL;DR CISA added CVE-2025-62593 to its Known Exploited Vulnerabilities catalog. The flaw is a code injection bug...
TL;DR: Imperva’s Red Team disclosed a Docker CopyEscape vulnerability that turns the ordinary docker cp command into...
Red Hat patched five critical bugs in Advanced Cluster Management this week. Two of them allow RHACM...
TL;DR A critical Haiwell HMI Gateway flaw threatens industrial control systems worldwide. Specifically, this vulnerability allows unauthenticated...
TL;DR A researcher published a proof-of-concept exploit for a Linux kernel AF_PACKET race condition. The flaw enables...
Researchers at watchTowr published a working exploit for a Citrix NetScaler RCE flaw this week. The bug,...
Apache patched five bugs in Struts 2 this week. Three of them count as Apache Struts DoS...
Roundcube shipped two security updates this week. Also, versions 1.6.18 and 1.7.3 close eleven separate bugs. The...
TL;DR: A critical User Profile Builder vulnerability, carrying a maximum CVSS score of 9.8 and tracked as...