A newly disclosed server-side request forgery (SSRF) vulnerability, tracked as CVE-2024-27564, has become a significant target for...
Vulnerability
A series of security vulnerabilities has been uncovered in the PHP programming language, potentially exposing web applications...
A privilege escalation vulnerability has been discovered in Below, a tool for recording and displaying system data...
A high-severity vulnerability, designated CVE-2025-29891, has been discovered in Apache Camel, potentially allowing attackers to inject malicious...
A critical vulnerability, designated CVE-2024-540385, has been uncovered in HPE Cray XD670 servers utilizing the AMI BMC...
A new command injection vulnerability is being exploited in Edimax Internet of Things (IoT) devices to spread...
A critical remote code execution (RCE) vulnerability, CVE-2025-24813, is now being actively exploited in the wild, allowing...
Security researchers Fabian Funder and Philipp Adelsberger at SBA Research have discovered two reflected cross-site scripting (XSS)...
Security researchers from the Network Security & Cryptography (NSC) Lab have identified a severe security vulnerability (CVE-2024-57040)...
A critical-severity security flaw has been discovered in Koha, the widely used open-source library management system. The...
A severe vulnerability, tracked as CVE-2025-27407, has been discovered in the popular graphql-ruby gem, putting millions of applications...
Schneider Electric has released a security notification detailing a critical vulnerability in the WebHMI component used in...
A critical security incident has been detected involving the widely-used GitHub Action “tj-actions/changed-files”. Step Security is actively...
A critical security vulnerability has been identified in Percona Monitoring and Management (PMM) Open Virtual Appliance (OVA)...
In a coordinated effort to mitigate an actively exploited security vulnerability, Google, Apple, and Microsoft have released...