Do Son
A newly discovered critical vulnerability in DjVuLibre, the open-source decoder for DjVu document files, has opened the...
Vulnerability
A cache poisoning vulnerability (CVE-2025-49826) with a CVSS score of 7.5 has been disclosed in Next.js, the...
Microsoft has released Edge Stable Channel Version 138.0.3351.65, an update that addresses critical browser vulnerabilities impacting Chromium-based...
The PHP project has released security patches addressing two vulnerabilities that expose PHP-based applications to SQL injection...
In a recent deep-dive analysis, Palo Alto Networks’ Unit 42 revealed disturbing insights into a surge of...
A newly disclosed vulnerability in HIKVISION’s widely deployed security management platform, applyCT (previously known as HikCentral), has...
Cymulate Research Labs has revealed Anthropic’s Filesystem MCP Server vulnerabilities. Two newly disclosed flaws—CVE-2025-53110 and CVE-2025-53109—exposes systems...
A critical security flaw has been discovered in Lucee, the high-performance, open-source CFML (ColdFusion Markup Language) application...
Microsoft recently published a blog post highlighting its youngest security researcher to date—an individual who began collaborating...
Before 2010, Industrial Control Systems (ICS) mostly operated within isolated Operational Technology (OT) networks and received little...
A newly discovered vulnerability in the Linux kernel has been assigned CVE-2025-38089, affecting systems running Network File...
Actively Exploited Google Chrome Zero-Day (CVE-2025-6554) Added to CISA’s KEV Catalog, PoC Available
Actively Exploited Google Chrome Zero-Day (CVE-2025-6554) Added to CISA’s KEV Catalog, PoC Available
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has officially added a high-severity vulnerability in Google Chrome...
Grafana Labs has issued an urgent security advisory addressing four critical vulnerabilities affecting two of its key...
Cisco has disclosed a critical vulnerability in its Unified Communications Manager (Unified CM) and Session Management Edition...
A newly disclosed vulnerability in dpkg-deb, the core utility responsible for handling Debian package archives, has raised...
A critical remote code execution (RCE) vulnerability has been discovered in Wing FTP Server, a popular cross-platform...
A newly disclosed high-severity vulnerability in the popular Forminator plugin threatens the security of hundreds of thousands...
Netflix Conductor, the powerful microservices orchestration engine used to automate complex workflows, has been found vulnerable to...
DataEase, an open-source business intelligence (BI) platform known for its ease of use and data visualization capabilities,...
A vulnerability was found in Graylog—a popular Security Information and Event Management (SIEM) solution. Tracked as CVE-2025-53106...