Do Son Quantum warns of critical RCE vulnerabilities in StorNext GUI (CVE-2025-46616, CVE-2025-46617). Users must upgrade or patch immediately to prevent exploitation.
Vulnerability
CERT@VDE reveals CVE-2025-3200 in Wiesemann & Theis devices: outdated TLS protocols expose Com-Server models to interception and man-in-the-middle attacks.
Quick Agent vulnerabilities could let attackers execute code or steal files from Ricoh MFPs. Update now to secure systems from critical remote attacks.
Critical Craft CMS zero-day CVE-2025-32432 exploited with Yii flaw; Metasploit module published, urging urgent patching to prevent server breaches.
CISA warns of critical vulnerabilities in Planet Technology products, including command injection and hardcoded credentials, allowing attackers to manipulate devices.
ARMO researchers reveal how io_uring blinds Linux security tools like Falco, Tetragon, and Defender, exposing systems to undetected rootkit attacks.
React Router flaws CVE-2025-43864 and CVE-2025-43865 allow cache poisoning and data spoofing attacks; users must upgrade to version 7.5.2 or later.
FastCGI CVE-2025-23016 vulnerability allows heap overflow and potential code execution on embedded devices. Users must upgrade to version 2.4.5 or later
NETSCOUT advisory reveals critical vulnerabilities in nGeniusONE, including hardcoded credentials & XSS. Update to version 6.4.0 b2350 or later immediately.
A CVE-2025-43859 vulnerability in Python’s h11 library may lead to request smuggling attacks when paired with buggy proxies. Patch to version 0.15.0 now.
ConnectWise addresses a critical ViewState code injection flaw in ScreenConnect. If machine keys are compromised, RCE is possible. Update immediately!
DslogdRAT malware exploited Ivanti Connect Secure via CVE-2025-0282, using web shells and C2 channels to evade detection and persist in networks.
NVIDIA issues updates to patch GPU and vGPU flaws, including CVE-2025-23244, which allows privilege escalation and potential code execution.
Craft CMS patches critical CVE-2025-32432 flaw. Exploited in the wild—users must update to versions 3.9.15, 4.14.15, or 5.6.17.
CERT/CC reveals systemic jailbreak flaws in major AI models, including ChatGPT and Claude, enabling bypass of safety filters with identical prompt techniques.
Critical security flaw (CVE-2024-54085) in AMI BMC software threatens PCs. ASUS releases urgent firmware updates for workstation motherboards. Update now!
CVE-2025-31324 lets attackers exploit SAP NetWeaver to upload webshells and deploy C2 tools like Brute Ratel, affecting patched enterprise systems.
A flaw in Windows tied to the inetpub folder (CVE-2025-21204) allows attackers to block updates without admin rights, exposing systems to future threats.
A vulnerability (CVE-2024-27876) in Apple's libAppleArchive allows arbitrary file writes and can bypass Gatekeeper on macOS and iOS. Patches are available.
CISA confirms stability of the CVE Program, dispelling funding concerns and reaffirming its commitment to cybersecurity and vulnerability management.
High-severity Redis vulnerability (CVE-2025-21605) allows unauthenticated users to cause DoS. Upgrade to patched versions or apply mitigations to protect your server.
GitLab releases critical security updates 17.11.1, 17.10.5, 17.9.7 to fix high-severity XSS, account takeover risks. Upgrade now to protect your GitLab instance.