Do Son
A recent coordinated security advisory issued by CERT@VDE and Weidmueller has disclosed three critical vulnerabilities affecting the...
Remote Code Execution
The QNX Software Development Platform (SDP)—a foundation of many embedded and real-time systems—has been found vulnerable to...
Avaya has issued a critical security advisory for its widely deployed Call Management System (CMS), warning customers...
The GeoTools project, a popular open-source Java library used for geospatial data processing, has issued a critical...
The Apache Kafka Project has released security advisories addressing three important vulnerabilities affecting various versions of the...
ManageEngine’s Exchange Reporter Plus, a widely-used web-based monitoring and reporting tool for Microsoft Exchange, has been found...
QNAP Systems, Inc. has released patches addressing multiple high-severity vulnerabilities in its Qsync Central and File Station...
A critical vulnerability in AWS Amplify’s UI generation tool, @aws-amplify/codegen-ui, is putting developers—and their build pipelines—at serious...
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a critical advisory warning of multiple high-impact...
Hewlett Packard Enterprise (HPE) has issued a security advisory addressing multiple high-impact vulnerabilities in its Insight Remote...
The CPython project has issued a security advisory addressing five vulnerabilities—including one CRITICAL and three HIGH-severity flaws—affecting...
In a stunningly fast-moving sequence of events, a serious vulnerability in the widely-used Roundcube webmail client—CVE-2025-49113—has been...
Two newly disclosed vulnerabilities in popular telecommunications devices expose critical infrastructure to unauthenticated remote code execution and...
IBM has released a security advisory addressing multiple vulnerabilities discovered in its QRadar Suite Software and Cloud...
The Wordfence Threat Intelligence team has uncovered a deceptive and highly persistent WordPress malware variant that disguises...
Hewlett Packard Enterprise (HPE) has issued a security bulletin detailing multiple severe vulnerabilities in its StoreOnce Software,...
In a recent revelation, Socket’s Threat Research Team has uncovered a stealthy npm supply chain attack leveraging...
A newly disclosed vulnerability affecting Netcomm Wireless devices—now under Lantronix ownership—has been assigned CVE-2025-4010, and it poses...
Roundcube Webmail, a widely-used browser-based IMAP client, has patched a critical security vulnerability, tracked as CVE-2025-49113 (CVSS...
Apple has patched a high-severity zero-day vulnerability in CoreAudio, the framework responsible for audio playback and processing...
Esri has issued a critical security patch for its widely used Portal for ArcGIS software, addressing a...
Veritas has issued a security advisory warning users of its Desktop Laptop Option (DLO) platform about two...