Do Son
The Quake III Arena engine, a cornerstone of FPS history open-sourced by id Software, has been hit...
Vulnerability
A critical vulnerability in the widely used PrestaShop e-commerce platform has been analyzed by vulnerability researcher Ananda...
A newly discovered vulnerability in the heart of the Windows visual experience has been patched by Microsoft,...
A critical privilege escalation vulnerability has been discovered in Dropbear, a lightweight SSH server widely used in...
Linux Kernel io_uring UAF Flaw Used to Cheat BPF Verifier and Achieve Container Escape, PoC Releases
Linux Kernel io_uring UAF Flaw Used to Cheat BPF Verifier and Achieve Container Escape, PoC Releases
Two security researchers, known by the handles st424204 and d4em0n, have published a deep-dive analysis of a...
Security researcher Morris Richman has disclosed a new privilege escalation vulnerability, CVE-2025-43472, which could allow an attacker...
While most Android users can breathe a sigh of relief, a newly analyzed Bluetooth vulnerability presents a...
cPanel, the industry-standard control panel software that powers a vast portion of the web hosting market, has...
A significant crack has been discovered in the armor of Windows Administrator Protection, potentially allowing low-privileged attackers...
Just when administrators thought NTLM relay attacks were becoming a thing of the past, a dangerous new...
Critical Flowise Flaw Allows Unauthenticated Remote Admin Takeover via Exposed Registration Endpoint
Critical Flowise Flaw Allows Unauthenticated Remote Admin Takeover via Exposed Registration Endpoint
The team behind Flowise—a popular open-source platform for building AI agents and LLM workflows—has issued an urgent...
Microsoft has patched a newly disclosed local privilege escalation (LPE) vulnerability affecting the Host Process for Windows...
Zimbra has issued a critical security patch, Zimbra Daffodil (v10.1.13), to address a host of vulnerabilities in...
Dell Technologies has issued a critical security advisory addressing multiple vulnerabilities in its CloudLink encryption management software,...
Security researcher Hyeonjin Choi has detailed a serious privilege escalation vulnerability (CVE-2025-50168) in Microsoft Windows’ Win32K subsystem,...
The strongSwan Team has disclosed a critical heap-based buffer overflow vulnerability (CVE-2025-62291) in the EAP-MSCHAPv2 plugin used...
Ubiquiti has released a security update to address a critical authentication bypass vulnerability (CVE-2025-52665) in its UniFi...
Security researcher Jordan Jay has published an extensive technical breakdown of CVE-2025-24990, a high-severity Elevation of Privilege...
Researchers Ivan Fratric and Natalie Silvanovich from Google Project Zero have disclosed a critical 0-click vulnerability (CVE-2025-54957,...
A cybersecurity researcher at Cymulate Research Labs, Ruben Enkaoua, has discovered yet another zero-click NTLM credential leakage...