Latest news
CVE-2025-55241: Microsoft Entra ID Flaw with CVSS 10.0 Could Have Compromised Every Tenant Worldwide
CVE-2023-35674 could significantly elevate local privileges, all without the need for any user interaction or additional execution privileges
A vulnerability (CVE-2023-28072) with a CVSS score of 7.8 was identified in versions of Dell Alienware Command Center prior to 5.5.51.0
A cybersecurity researcher has released the details, and a proof-of-concept (PoC) exploit for a high-severity vulnerability (CVE-2023-28229)
Anonymous Sudan, previously known for launching multiple DDoS attacks against Microsoft, recently targeted 'X' (formerly Twitter)
A cybersecurity researcher has released the details, and a PoC exploit for a critical severity vulnerability (CVE-2023-34039)
CVEβ2023β25528 (CVSS: 8.8) - A web server plugin flaw could cause a stack overflow, potentially leading to arbitrary code execution
Synacktiv has released a proof-of-concept (PoC) exploit for a high-severity vulnerability (CVE-2023-35001) that exists in the Linux kernel
CVE-2023-4696 (CVSS score of 9.8) allows a nefarious actor to modify another userβs data, including passwords
At its core, CVE-2023-38036 allows malevolent actors to send a deviously crafted message to the Wavelink Avalanche Manager
CVE-2023-40595 vulnerability allows an attacker to execute a specially crafted query that can then be used to serialize untrusted data
CVE-2023-40596 allows an attacker to escalate their privileges on a Windows machine by abusing an insecure path reference in a DLL file
The CVE-2023-20900 vulnerability allows a malevolent actor, positioned in a man-in-the-middle (MITM) network setup between the vCenter server
In July 2023, JPCERT identified and christened this technique "MalDoc in PDF", which ingeniously sidesteps detection
CVE-2023-41265 allows attackers to elevate privileges by tunneling HTTP requests, granting them access to send HTTP requests
Revealed in May this year, this flaw is exploited to release the Kinsing malware and a cryptominer, posing significant risks for users
ClamAV versions 1.1.x prior to 1.1.2, 1.0.x prior to 1.0.3, and 0.103.x earlier than 0.103.10 are affected by this vulnerability