Do Son
TL;DR A researcher found six SGLang vulnerabilities, and the worst allow unauthenticated remote code execution. SGLang serves...
unauthenticated RCE
TL;DR TP-Link patched a serious TP-Link TL-WR940N flaw, CVE-2026-12935. The bug allows unauthenticated remote code execution on...
TL;DR ManageEngine patched a critical ADAudit Plus vulnerability tracked as CVE-2026-6516. Two weaknesses in the product’s Agent...
TL;DR Two new FreePBX vulnerabilities each carry a CVSS score of 9.3. One gives unauthenticated remote code...
TL;DR IBM disclosed two critical flaws in Langflow OSS, the open-source AI workflow builder. One is a...
The Drupal Security Team has released an urgent advisory detailing a highly critical vulnerability lurking within the...
Security researchers have uncovered a critical vulnerability in AVideo-Encoder, a key component of the open-source AVideo Platform...
Cybersecurity researchers have identified a critical vulnerability in Cisco Secure Firewall Management Center (FMC) Software, the administrative...
Security researchers have uncovered a maximum-score vulnerability in FreeScout, the popular open-source help desk and shared inbox...
Ivanti has issued an urgent security advisory confirming that attackers are actively exploiting critical vulnerabilities in its...
A critical Remote Code Execution (RCE) vulnerability has been discovered in the Sneeit Framework, a core plugin...
A newly disclosed critical vulnerability in the Sneeit Framework — a widely used WordPress plugin powering premium...
Cybersecurity firms are sounding the alarm over a critical vulnerability in Fortinet FortiWeb, the company’s Web Application...
Zoho Corporation has released an urgent security advisory addressing a critical severity SQL injection vulnerability affecting Analytics...
Oracle has released its October 2025 Critical Patch Update (CPU), fixing a massive 374 security vulnerabilities and...
A critical security vulnerability, CVE-2024-7399, is being actively exploited in the wild in Samsung MagicINFO 9 Server,...