Two vulnerabilities were found in the open-source OpenCode agent that let attackers write malicious code directly onto...
Cross-Site Scripting
Elastic has issued important security updates for Kibana, the popular data visualization dashboard for the Elastic Stack,...
The maintainers of Roundcube Webmail, one of the world’s most widely used open-source email solutions, have issued...
The maintainers of Angular, the popular platform for building mobile and desktop web applications, have released an...
GitLab has released security updates for Community Edition (CE) and Enterprise Edition (EE), fixing multiple vulnerabilitiesβincluding high-severity...
Grafana Labs has released important security patches for multiple versions of its observability platform, addressing two significant...
Zoom has rolled out a security update patching six newly disclosed vulnerabilities affecting its Workplace, Rooms, and...
The Frappe Framework, a widely used full-stack application platform that powers ERPNext, has been found vulnerable to...
The open-source Git service Gogs, known for its simplicity and ease of deployment, disclosures two severe security...
The Jenkins community has issued a high-severity security advisory for a newly disclosed vulnerability in the Gatling...
Argo CD, the widely adopted GitOps continuous delivery tool for Kubernetes, has issued a high-severity security advisory...
Researchers have disclosed a reflected cross-site scripting (XSS) vulnerability in Label Studio, an open-source data labeling tool...
Mitel has issued a security advisory regarding a reflected cross-site scripting (XSS) vulnerability, tracked as CVE-2025-23092 (CVSS...
GitLab has issued a security advisory, urging all users of self-managed GitLab Community Edition (CE) and Enterprise...
Security researcher Jerry Gamblin has released his annual CVE data review. 2024 saw an unprecedented surge in...
Zimbra Collaboration, a widely adopted email and collaboration platform disclosed three new security vulnerabilities. These flaws, identified...
Netgear, a leading provider of networking hardware, has issued a security advisory urging users to update the...
WordPress, the world’s leading content management system (CMS), has released a critical security update, “WordPress 6.5.5,” to...
Elastic Security Labs has recently uncovered a novel cyberattack technique dubbed “GrimResource,” which leverages specially crafted MSC...
In a groundbreaking development, researchers at the University of Illinois Urbana-Champaign have demonstrated that teams of AI...
GitLab, the popular web-based DevOps platform, has released urgent security patches to address multiple critical vulnerabilities affecting...
A significant security vulnerability has been identified in WordPress, the world’s most popular content management system, which...