Patch Now

9.8 Critical Alert: One-Byte Heap Corruption in Exim Exposes Global Mail Servers to Takeover

• Vulnerability Report

9.8 Critical Alert: One-Byte Heap Corruption in Exim Exposes Global Mail Servers to Takeover

Do Son May 13, 2026 0

A “highest-caliber” vulnerability was found in Exim, one of the internet’s most widely used Mail Transfer Agents...

Read More Read more about 9.8 Critical Alert: One-Byte Heap Corruption in Exim Exposes Global Mail Servers to Takeover

CVE-2025-13915: Critical 9.8 Flaw in IBM API Connect Lets Attackers Bypass Login

• Vulnerability Report

CVE-2025-13915: Critical 9.8 Flaw in IBM API Connect Lets Attackers Bypass Login

Do Son December 30, 2025 0

IBM has issued an urgent security alert for users of its API Connect platform after internal testing...

Read More Read more about CVE-2025-13915: Critical 9.8 Flaw in IBM API Connect Lets Attackers Bypass Login

Symfony Patches PATH_INFO Parsing Flaw Leading to Authorization Bypass (CVE-2025-64500)

• Vulnerability Report

Symfony Patches PATH_INFO Parsing Flaw Leading to Authorization Bypass (CVE-2025-64500)

Do Son November 15, 2025 0

The Symfony project has released security updates to address a newly disclosed vulnerability affecting its widely used...

Read More Read more about Symfony Patches PATH_INFO Parsing Flaw Leading to Authorization Bypass (CVE-2025-64500)

CRITICAL Cisco Zero-Day (CVE-2025-20333, CVSS 9.9) Under Active Attack: VPN Flaw Allows Root RCE

• Vulnerability Report

CRITICAL Cisco Zero-Day (CVE-2025-20333, CVSS 9.9) Under Active Attack: VPN Flaw Allows Root RCE

Do Son September 26, 2025 0

Cisco has disclosed a zero-day vulnerability affecting its Secure Firewall Adaptive Security Appliance (ASA) Software and Secure...

Read More Read more about CRITICAL Cisco Zero-Day (CVE-2025-20333, CVSS 9.9) Under Active Attack: VPN Flaw Allows Root RCE

GitLab Fixes High-Severity DoS Flaws: Unauthenticated Attackers Could Crash Instances

• Vulnerability Report

GitLab Fixes High-Severity DoS Flaws: Unauthenticated Attackers Could Crash Instances

Do Son September 26, 2025 0

GitLab has released security updates for versions 18.4.1, 18.3.3, and 18.2.7 of its Community Edition (CE) and...

Read More Read more about GitLab Fixes High-Severity DoS Flaws: Unauthenticated Attackers Could Crash Instances

Critical Cisco ISE Flaw CVE-2025-20337 (CVSS 10.0) Allows Unauthenticated Root RCE – Patch Immediately

• Vulnerability Report

Critical Cisco ISE Flaw CVE-2025-20337 (CVSS 10.0) Allows Unauthenticated Root RCE – Patch Immediately

Do Son July 17, 2025 0

A critical vulnerability was found in Cisco Identity Services Engine (ISE) and Cisco ISE-PIC. Tracked as CVE-2025-20337,...

Read More Read more about Critical Cisco ISE Flaw CVE-2025-20337 (CVSS 10.0) Allows Unauthenticated Root RCE – Patch Immediately

Urgent WordPress Alert: Motors Theme Flaw (CVE-2025-4322) Actively Exploited for Site Takeover

• Vulnerability Report

Urgent WordPress Alert: Motors Theme Flaw (CVE-2025-4322) Actively Exploited for Site Takeover

Do Son June 20, 2025 0

Last month, a critical vulnerability was reported to Wordfence that now threatens more than 22,000 WordPress websites...

Read More Read more about Urgent WordPress Alert: Motors Theme Flaw (CVE-2025-4322) Actively Exploited for Site Takeover

Critical Path Traversal Vulnerability (CVSS 9.8) Exposes Mitel MiCollab Servers to Unauthorized Access

• Vulnerability

Critical Path Traversal Vulnerability (CVSS 9.8) Exposes Mitel MiCollab Servers to Unauthorized Access

Do Son June 13, 2025 0

Mitel has issued a critical security advisory warning of a newly discovered path traversal vulnerability affecting its...

Read More Read more about Critical Path Traversal Vulnerability (CVSS 9.8) Exposes Mitel MiCollab Servers to Unauthorized Access

HPE Aruba Networking Patches Sensitive Data Exposure Vulnerability in Private 5G Core Platform

• Vulnerability Report

HPE Aruba Networking Patches Sensitive Data Exposure Vulnerability in Private 5G Core Platform

Do Son June 11, 2025 0

HPE Aruba Networking has released a security update addressing a high-severity vulnerability in its Private 5G Core...

Read More Read more about HPE Aruba Networking Patches Sensitive Data Exposure Vulnerability in Private 5G Core Platform

CISA Alert: Critical Vulnerabilities Found in CyberData SIP Emergency Intercom Devices

• Vulnerability Report

CISA Alert: Critical Vulnerabilities Found in CyberData SIP Emergency Intercom Devices

Do Son June 7, 2025 0

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a critical advisory warning of multiple high-impact...

Read More Read more about CISA Alert: Critical Vulnerabilities Found in CyberData SIP Emergency Intercom Devices

Security Alert: Multi Flaws in Kea DHCP Server Disclosed

• Vulnerability

Security Alert: Multi Flaws in Kea DHCP Server Disclosed

Do Son May 30, 2025 0

The Internet Systems Consortium (ISC) has issued an urgent advisory affecting its modern Kea DHCP server, disclosing...

Read More Read more about Security Alert: Multi Flaws in Kea DHCP Server Disclosed

URGENT Chrome Update: High-Risk CVE-2025-4664 Flaw Actively Exploited In The Wild – Patch Immediately!

• Vulnerability

URGENT Chrome Update: High-Risk CVE-2025-4664 Flaw Actively Exploited In The Wild – Patch Immediately!

Do Son May 15, 2025 0

Google has released a critical Stable Channel Update for Chrome Desktop, bumping the version to 136.0.7103.113/.114 for...

Read More Read more about URGENT Chrome Update: High-Risk CVE-2025-4664 Flaw Actively Exploited In The Wild – Patch Immediately!

Node.js Alerts: High-Severity Flaw (CVE-2025-23166) Risks Remote System Crashes! Update Immediately!

• Vulnerability

Node.js Alerts: High-Severity Flaw (CVE-2025-23166) Risks Remote System Crashes! Update Immediately!

Do Son May 15, 2025 0

In an important security announcement released recently, the Node.js team has rolled out vital updates for its...

Read More Read more about Node.js Alerts: High-Severity Flaw (CVE-2025-23166) Risks Remote System Crashes! Update Immediately!