Do Son
TL;DR Metabase disclosed a critical SQL injection zero-day rated CVSS 10. An unauthenticated remote attacker can gain...
sql injection
TL;DR: The pgAdmin Development Team patched a pgAdmin 4 RCE flaw tracked as CVE-2026-17566, rated CVSS 9.4....
TL;DR Adobe published a Priority 1 security update for Adobe Campaign Classic. The patch resolves seven severe...
TL;DR A critical SQL injection flaw hits Weidmueller PROCON-WEB SCADA. Tracked as CVE-2026-16462, it scores a CVSS...
TL;DR: The CodeIgniter4 team patched four security flaws in release v4.7.4. The most severe, a CodeIgniter4 RCE...
TL;DR The PHP project fixed three flaws in its latest releases. The headline bug is a PHP...
The Apache Syncope project has patched two security flaws in its identity management platform. Both Apache Syncope...
TL;DR Two new FreePBX vulnerabilities each carry a CVSS score of 9.3. One gives unauthenticated remote code...
TL;DR CISA added four flaws to its KEV catalog on July 21, 2026. The list covers critical...
TL;DR Apache has patched three SQL injection flaws in Fineract, the open-source core banking platform. The Apache...
TL;DR WordPress shipped 7.0.2 on July 17, 2026 to fix a critical flaw chain. The bug is...
TL;DR CVE-2026-1207 is a high-severity Django SQL injection flaw, scored 8.3. It affects RasterField lookups when Django...
Ubiquiti released a UniFi security advisory, Bulletin 066. It fixes 25 flaws in UniFi products. One bug...
Security researchers publicly disclosed a critical vulnerability in Control Web Panel alongside proof-of-concept exploit code. This flaw,...
TL;DR CISA published an advisory for five StoneFly Storage Concentrator vulnerabilities on 30 June 2026. Two rate...
TL;DR Cacti fixed four critical flaws in version 1.2.31. Three allow pre-authentication SQL injection, and one allows...
TL;DR Mitel disclosed 12 security flaws in MiCollab and the MiVoice Business Solution Virtual Instance (MiVB SVI)....
TL;DR Apache Doris version 0.6.1 patches a severe security flaw in its MCP Server. Specifically, an Apache...
A dangerous security flaw is actively disrupting enterprise web servers globally. Specifically, attackers are aggressively weaponizing a...
Researchers from CMU and UW-Madison discovered a critical security flaw in Langroid, a Python framework for LLM...
The Roundcube development team has released urgent Roundcube Webmail security updates. These software patches address versions 1.6.16...
Security researchers have discovered a massive cyber assault infecting hundreds of web servers worldwide. Specifically, a newly...