Do Son Critical flaws in Microsoft's Brokering File System (BFS), including race conditions and UAF bugs, expose Windows to privilege escalation. PoC code available. Patch now!
Exploit
An old Microsoft Office vulnerability (CVE-2017-0199) is being exploited in a new phishing campaign to deploy the FormBook infostealer malware. Update now!
Explore a critical vBulletin RCE vulnerability stemming from a flawed patch. This article details the PHP Object Injection leading to RCE, complete with a PoC
Enthusiasts found a userland exploit in the new Nintendo Switch 2, altering program behavior. Nintendo maintains a strict stance on modifications.
A security researcher achieved full control of the FiberGateway GR241AG router, exposing 1.6M Portuguese households to RCE, DNS hijacking, and WPA2 key theft.
A reflected XSS flaw in GlobalProtect (CVE-2025-0133) allows malicious JavaScript execution. PoC exploit code is available. Update your PAN-OS.
RAGFlow is vulnerable to account takeover. This article details the brute-force exploit and the urgent security risk (CVE-2025-48187, No Patch)
Serious vulnerabilities in pfSense put networks at risk. Could your firewall be hacked? Learn about the exploits and how to stay safe.
A WordPress vulnerability puts private information at risk for nearly a billion websites. Can your site's draft titles be stolen?
iOS is vulnerable! Learn about the dirtyZero exploit and how it allows system customization without jailbreak. Details on CVE-2025-24203.
CVE-2025-21297 in Windows RD Gateway allows remote code execution via race condition. PoC proves exploitability. Patch now to stay secure.
Google Chrome 136.0.7103.113/.114 patches 4 security bugs including CVE-2025-4664, a zero-day exploit found in the wild. Users urged to update immediately.
A security audit reveals critical flaws in GNU Screen, including a root exploit. The flaws impact both Screen 5.0.0 and 4.9.x, posing a major risk to Linux/UNIX systems.
Netskope Labs details a complex infection chain used by the DOGE Big Balls Ransomware, involving PowerShell scripts, exploits, and lateral movement tactics.
A zero-day privilege escalation vulnerability (CVE-2025-29824) in Microsoft CLFS was exploited by Balloonfly (Play ransomware) before the official patch.
CVE-2025-47154 (CVSS 9.0) is a use-after-free flaw in the Ladybird browser engine that attackers can exploit. Update to the fixed build now.
A WinZip vulnerability (CVE-2025-33028) allows attackers to bypass Mark-of-the-Web (MotW) protection, enabling silent code execution via malicious archives.
Cellebrite's Android zero-day exploit (CVE-2024-53104) used in alleged spyware attempt on activist. Details, technical analysis, and patch info.
A misconfiguration exposed APT41 tools targeting Shiseido, revealing Fortinet exploit scripts, webshells, and reconnaissance tactics.
CISA warns of actively exploited vulnerabilities in Apple and Microsoft products. Urgent patching is required to mitigate risks from these attacks.
CVE-2024-58136: A security vulnerability in the Yii 2 PHP framework is being actively exploited. Learn about the risk and necessary updates.
CISA has added Linux kernel vulnerabilities CVE-2024-53197 and CVE-2024-53150 to its KEV catalog, warning of active exploitation. Learn how these flaws are used in Android device exploits and what steps to take.