Do Son
A newly released Metasploit module highlights the critical threat posed by an actively exploited remote code execution...
Vulnerability
SonicWall has issued a critical security advisory for a newly identified vulnerability—CVE-2025-40599—affecting its SMA 100 series appliances,...
The Cybersecurity and Infrastructure Security Agency (CISA), in collaboration with Schneider Electric, has issued a security advisory...
The Kubernetes project has issued an important advisory addressing a critical vulnerability—CVE-2025-7342 (CVSS 8.1)—in the Kubernetes Image...
In April 2025, Microsoft issued a critical security patch addressing a serious vulnerability in the Windows Common...
Ubiquiti has issued a security advisory for a critical vulnerability affecting multiple models in its UniFi Access...
Security researcher Vagebondcur has uncovered four vulnerabilities in the Nexxt Solutions NCM-X1800 mesh router, including unauthenticated telnet...
A critical vulnerability—CVE-2025-34068—has been discovered in Samsung’s WLAN AP WEA453e access points, allowing unauthenticated remote command execution...
A critical remote code execution (RCE) vulnerability has been discovered in the Symantec Endpoint Management suite, also...
Security researcher D3vil has uncovered and weaponized a kernel-level Use-After-Free (UAF) vulnerability—CVE-2025-38001—within the Linux networking stack. The...
Juniper Networks, a cornerstone in enterprise-grade network security, has issued a critical alert for a Missing Authorization...
Security researcher Filip Dragović has been credited by Microsoft for uncovering CVE-2025-48799, a local privilege escalation (LPE)...
HPE Aruba Networking has issued a critical security advisory for its Instant On Access Points, urging users...
The Apache Software Foundation has released critical updates for Apache Tomcat 9, addressing three newly disclosed denial-of-service...
MongoDB Inc. has issued patches for two newly discovered vulnerabilities affecting multiple versions of its server software....
Redis, the beloved in-memory data store powering millions of real-time applications, has just patched a critical vulnerability...
A newly discovered vulnerability in the Linux kernel has been assigned CVE-2025-38089, affecting systems running Network File...
Actively Exploited Google Chrome Zero-Day (CVE-2025-6554) Added to CISA’s KEV Catalog, PoC Available
Actively Exploited Google Chrome Zero-Day (CVE-2025-6554) Added to CISA’s KEV Catalog, PoC Available
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has officially added a high-severity vulnerability in Google Chrome...
Netflix Conductor, the powerful microservices orchestration engine used to automate complex workflows, has been found vulnerable to...
The Electron team has published a new security advisory addressing two significant vulnerabilities that could impact a...