Do Son
TL;DR Researchers have published full details and proof-of-concept code for GhostLock. This Linux kernel bug, tracked as...
Vulnerability Report
TL;DR The CISA KEV Catalog just gained four actively exploited flaws. Three of them carry a top...
TL;DR BMC disclosed a critical flaw in Control-M/Server tracked as CVE-2026-10539. The Control-M command injection bug scores...
TL;DR Researchers have published full technical details and proof-of-concept code for a SharePoint remote code execution flaw....
Ubiquiti released a UniFi security advisory, Bulletin 066. It fixes 25 flaws in UniFi products. One bug...
TL;DR IBM disclosed a critical CVSS 9.8 flaw, tracked as CVE-2026-12943, in its Power Hardware Management Console...
Multiple Tenda router models contain a hidden flaw. Researchers track this Tenda authentication backdoor as CVE-2026-11405, which...
BeyondTrust disclosed two critical pre-authentication vulnerabilities affecting its Remote Support and Privileged Remote Access products. The vendor...
Security researcher Hyunwoo Kim recently published technical details and a proof-of-concept for the Januscape KVM escape vulnerability....
TL;DR Cato AI Labs found a critical Cursor IDE RCE vulnerability. These bugs allow attackers to break...
TL;DR A Debian maintainer flagged a widespread OpenSSL error handling problem across the open-source ecosystem. It surfaced...
TL;DR The PHP team fixed two flaws, including a PHP remote DoS that can crash a whole...
IBM discovered three security flaws affecting WebSphere Application Server versions 9.0 and 8.5. These IBM WebSphere vulnerabilities...
The FreeBSD Project published multiple FreeBSD security advisories today. These warnings expose critical flaws in OpenZFS, libalias,...
TL;DR Synacktiv publicly disclosed a Kerberos reflection bypass tracked as CVE-2026-26128. The flaw lets a domain user...
TL;DR The OWASP ModSecurity team patched two ModSecurity vulnerabilities in version 3.0.16. Both let attackers slip payloads...
IBM security researchers discovered six severe Langflow OSS vulnerabilities. These flaws allow attackers to execute arbitrary code,...
TL;DR CISA published an advisory for five DCMTK vulnerabilities on 30 June 2026. The DICOM toolkit powers...
TL;DR CVE-2026-48282, a critical CVSS 10 ColdFusion arbitrary code execution vulnerability, is under active attack. Hackers are...
Security researchers publicly disclosed a critical vulnerability in Control Web Panel alongside proof-of-concept exploit code. This flaw,...
TL;DR Researchers disclosed two UltraVNC repeater vulnerabilities in the tool’s HTTP admin server. One allows arbitrary code...
TL;DR WatchGuard has patched seven WatchGuard Firebox vulnerabilities in its Fireware OS. The worst, CVE-2026-13368 (CVSS 9.2),...