Do Son
TL;DR Attackers chained two Zammad zero-day flaws to break into the Dutch Institute for Vulnerability Disclosure (DIVD)...
Vulnerability Report
TL;DR A critical Capacitor vulnerability, CVE-2026-103922, scores 9.3 on CVSS and affects a framework with over 5.5...
TL;DR A Sharp printer vulnerability, now tracked as CVE-2024-58388, lets unauthenticated attackers read any file on the...
TL;DR On October 1, the Apache Software Foundation released Apache HTTP Server 2.4.69 with fixes for 20...
TL;DR Red Hat has disclosed a CVSS 9.9 Foreman RCE flaw that lets low-privileged users run commands...
TL;DR cPanel published security advisories addressing three critical cPanel security vulnerabilities across supported server platforms. Specifically, these...
TL;DR OpenBao maintainers issued security updates to address two critical flaws in the secrets management platform. These...
TL;DR CISA published an advisory warning operators about several Monta EV charging vulnerabilities. Specifically, these flaws allow...
TL;DR Dell fixed two CVSS 10 flaws in its Container Storage Modules (CSM). These Dell Container Storage...
TL;DR Attackers are exploiting CVE-2026-104286, a CVSS 9.8 FortiMail vulnerability that lets unauthenticated users write arbitrary files....
TL;DR Technical details and a working proof-of-concept exploit are now public for CVE-2026-94545, a critical Next.js RCE...
TL;DR ASUS recently disclosed three high-severity hardware and firmware flaws. These ASUS security vulnerabilities impact multiple router...
TL;DR Attackers are exploiting a MediaWiki RCE flaw tracked as CVE-2026-100382. This CVSS 10 unauthenticated RCE sits...
TL;DR Project maintainers released patches to address four ModSecurity security vulnerabilities. Specifically, these bugs cause uninitialized pointer...
TL;DR Axios released updates to patch ten Axios security vulnerabilities. Specifically, these bugs include prototype pollution and...
TL;DR Dell published an advisory covering four Dell Terraform Provider vulnerabilities. The most critical flaw disables TLS...
TL;DR Kiteworks disclosed 78 security flaws across its Core platform, Email Protection Gateway, and forms products. Nine...
TL;DR The Apache Software Foundation resolved eight Apache MINA SSHD vulnerabilities. These critical security defects include authentication...
TL;DR Developers disclosed six Apache WSS4J vulnerabilities. These critical security defects include authentication bypasses and denial of...
TL;DR On September 30, 2026, the Python Software Foundation disclosed two security flaws in CPython. These critical...
TL;DR CISA published advisory ICSA-26-272-07 on September 29, 2026, covering two flaws in the Viidure dashcam app...
TL;DR CVE-2026-88772 is a pre-authentication memory overflow in Citrix NetScaler ADC and Gateway. Attackers exploited it in...