Do Son High DoS risk in Multer! These flaws threaten millions of Node.js applications. Update now to avoid these attacks.
Vulnerability
Critical vulnerability (CVSS 9.9) in samlify! This flaw puts many SSO implementations at risk, affecting a library with 768,000+ monthly downloads.
Details on a zero-day vulnerability (CVE-2025-31324) in SAP NetWeaver that allows file uploads and its link to the Qilin ransomware group.
Critical vulnerability (CVSS 9.8) in the Motors WordPress theme! This flaw puts over 22,000 websites at risk of full takeover. Update now!
A Spring Framework vulnerability can allow unauthorized access! Learn how it bypasses security annotations and how to fix it.
RAGFlow is vulnerable to account takeover. This article details the brute-force exploit and the urgent security risk (CVE-2025-48187, No Patch)
Serious vulnerabilities in pfSense put networks at risk. Could your firewall be hacked? Learn about the exploits and how to stay safe.
A WordPress vulnerability puts private information at risk for nearly a billion websites. Can your site's draft titles be stolen?
Firefox was compromised at Pwn2Own using JavaScript zero-day exploits. Learn the details of the out-of-bounds write and integer overflow vulnerabilities.
iOS is vulnerable! Learn about the dirtyZero exploit and how it allows system customization without jailbreak. Details on CVE-2025-24203.
Critical vulnerability (CVSS 9.1) in Auth0-PHP SDK! This flaw threatens applications with over 16 million downloads. Update now to avoid brute force attacks.
Tornado is vulnerable to DoS attacks due to its default parser. Details on CVE-2025-47287 and how to mitigate the high-severity threat.
Learn about the Label Studio XSS flaw (CVE-2025-47783) that allows attackers to inject malicious scripts. Protect your data labeling projects.
glibc vulnerability CVE-2025-4802 could allow attackers to hijack setuid binaries on Linux systems, putting millions at risk.
CVE-2025-21297 in Windows RD Gateway allows remote code execution via race condition. PoC proves exploitability. Patch now to stay secure.
Discover a serious Reflex Python framework vulnerability and how to fix it. Learn about the CVE-2025-47425 flaw and secure your web applications.
OpenText OBM hit by CVSS 9.4 flaw allowing privilege escalation. Patch now to prevent serious security breaches in enterprise IT environments.
Critical vulnerability (CVSS 9.8) in Rockwell Automation! Learn about the high-risk flaw and how to protect industrial systems.
Over 10,000 WordPress sites at risk from Eventin plugin flaw CVE-2025-47539. Attackers can gain admin access via unauthenticated API exploit.
PoC for CVE-2023-41992 reveals iOS kernel flaw enabling local privilege escalation. Apple patched it, but risks persist for outdated devices.
CISA adds critical DrayTek router, Chrome, and SAP NetWeaver flaws to its KEV list after in-the-wild exploitation. Federal agencies face a June 5th patch deadline.
CVE-2025-4641: XXE flaw in popular WebDriverManager library (CVSS 9.3) exposes test systems to file leaks and SSRF. Patch to 6.0.2 now.