Security researcher Jerry Gamblin has released his annual CVE data review. 2024 saw an unprecedented surge in...
Vulnerability
Security researchers published the technical details and a proof-of-concept (PoC) exploit code for CVE-2024-43452 (CVSS 7.5), a...
Moxa, a leading provider of industrial networking and communication solutions, has issued a security advisory warning of...
Open-source CI/CD platform GoCD has released an urgent security update to address a critical vulnerability, CVE-2024-56320 (CVSS...
A newly discovered vulnerability in the UpdraftPlus Backup & Migration Plugin, used by over 3 million WordPress...
The popular React framework, Next.js, has addressed a security vulnerability that could have allowed attackers to launch...
A high-severity vulnerability (CVE-2024-56513) has been identified in Karmada (Kubernetes Armada), a management platform designed to facilitate...
A critical security vulnerability, tracked as CVE-2025-22275 (CVSS 9.3) has been discovered and patched in iTerm2, a...
In a recent study, researchers from Korea University have unveiled “SysBumps,” the first successful Kernel Address Space...
A revelation emerged from the Chaos Communication Congress (CCC) last week, shaking the foundations of Windows’ trusted...
ASUS has issued a security advisory warning users of critical vulnerabilities affecting several router models. Two flaws,...
SafeBreach Labs revealed a zero-click vulnerability in the Windows Lightweight Directory Access Protocol (LDAP) service, dubbed βLDAP...
Progress Software Corporation, a global provider of products to develop, deploy, and manage high-impact business applications, has...
Researchers at Unit 42 have discovered a new technique, dubbed “Bad Likert Judge,” that can bypass the...
D-Link has issued a critical advisory urging users to retire and replace several legacy router models, including...
A security researcher published a proof-of-concept (PoC) exploit for CVE-2024-21182, a critical vulnerability in Oracle WebLogic Server....
HvS-Consulting GmbH has released an insightful report shedding light on the often-overlooked vulnerabilities of the Network File...
The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning about an actively exploited vulnerability...
A critical vulnerability has been uncovered in TrueNAS CORE, the popular open-source network-attached storage (NAS) operating system....
Security researcher Netsecfish has discovered a command injection vulnerability, tracked as CVE-2024-12987, in the web management interface...