Do Son
A high-severity vulnerability in a popular WordPress event management plugin has been disclosed and patched, raising alarms...
Vulnerability
A newly surfaced proof of concept (PoC) has reignited attention around a critical iOS kernel vulnerability—CVE-2023-41992—that Apple...
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added three new security vulnerabilities to its Known...
A critical XML External Entity (XXE) injection vulnerability has been identified in WebDriverManager, an essential Java library...
The PgPool Global Development Group has issued a high-severity security advisory for Pgpool-II, a widely used middleware...
Jenkins, a popular open-source automation server, is a crucial tool for many development and operations teams. A...
Network Attached Storage (NAS) devices have become essential components of both home and business networks, providing centralized...
ESET researchers have exposed a covert cyberespionage campaign, dubbed Operation RoundPress, believed to be orchestrated by the...
A newly disclosed Server-Side Request Forgery (SSRF) vulnerability in SonicWall’s SMA1000 series appliances could allow remote attackers...
JPCERT/CC has issued a vulnerability note disclosing multiple security flaws in a-blog cms, a popular content management...
Google has released a critical Stable Channel Update for Chrome Desktop, bumping the version to 136.0.7103.113/.114 for...
Node.js Alerts: High-Severity Flaw (CVE-2025-23166) Risks Remote System Crashes! Update Immediately!
Node.js Alerts: High-Severity Flaw (CVE-2025-23166) Risks Remote System Crashes! Update Immediately!
In an important security announcement released recently, the Node.js team has rolled out vital updates for its...
Security researchers have demonstrated a powerful software-only technique to bypass Microsoft BitLocker encryption—without needing a screwdriver, soldering...
Apache IoTDB, a system designed for managing industrial IoT time-series data, faces a series of security vulnerabilities...
Fortinet has released patches for a critical vulnerability (CVE-2025-22252, CVSS 9.0) affecting multiple products, including FortiOS, FortiProxy,...
Security researchers at ETH Zürich have unveiled a novel speculative execution attack—Branch Privilege Injection (CVE-2024-45332)—that subverts Intel’s...
A pair of critical-severity vulnerabilities in the OpenPubkey authentication protocol and its companion tool, OPKSSH, could allow...
On May 12, 2025, Xerox published Security Bulletin XRX25-009, announcing the release of its April 2025 Security...
Siemens has released a critical security advisory (SSA-047424) addressing two severe vulnerabilities—CVE-2025-26389 and CVE-2025-26390—affecting its OZW672 and...
Ivanti has released a critical security patch for its on-premises Neurons for ITSM platform, addressing a severe...