watchTowr Labs has released a detailed analysis of CVE-2025-54309, a zero-day authentication bypass vulnerability in CrushFTP, the...
Vulnerability
NVIDIA has released an important security update addressing a high-severity vulnerability in its NeMo Curator tool. The...
D-Link has issued an important security bulletin concerning its legacy DI-7400G+ router series, warning users of a...
Google has released a critical security update for the Stable channel of Chrome, addressing a use-after-free vulnerability...
A critical flaw has been identified in the Welotec egOS WebGUI backend, tracked as CVE-2025-41702, which could...
The Cloud Software Group (CSG) has released urgent security updates to address three high-severity vulnerabilities affecting NetScaler...
Google revealed that its large language model (LLM)-assisted vulnerability discovery framework detected and reported a critical flaw...
The Langflow project has issued an important security advisory regarding a newly discovered vulnerability that poses a...
A newly disclosed security flaw, tracked as CVE-2025-54370, has been identified in PhpSpreadsheet, a PHP-based library that...
Security researchers have disclosed two critical vulnerabilities in DataEase, an open-source business intelligence (BI) tool designed for...
The Cybersecurity and Infrastructure Security Agency (CISA) has added three new vulnerabilities to its Known Exploited Vulnerabilities...
TP-Link has issued a security advisory addressing a high-severity vulnerability (CVE-2025-8627) affecting its KP303 Smart Plug, warning...
Security researchers at Rapid7 have uncovered four serious vulnerabilities in Securden Unified Privileged Access Manager (PAM), a...
A high-severity zero-day vulnerability in Google Chrome’s V8 JavaScript engine, tracked as CVE-2025-5419, has been exposed, with...
Salesforce Security has announced the resolution of multiple vulnerabilities in Tableau Server, identified during a proactive security...
IBM has released a security bulletin addressing a severe vulnerability in its Jazz Team Server, a Java-based...
Plex Media Server (PMS) users are being urged to update their systems immediately after the discovery of...
The Directus project has disclosed a critical vulnerability tracked as CVE-2025-55746 (CVSS 9.3) that could allow unauthenticated...
A new report from Palo Alto Networksβ Unit 42 has shed light on an unusual and stealthy...
A critical security vulnerability has been disclosed in sha.js, a widely used JavaScript library that implements the...