Spring Framework developers have issued a security advisory addressing a vulnerability that could lead to unauthorized access...
Vulnerability
RAGFlow, the open-source Retrieval-Augmented Generation (RAG) platform developed by Infiniflow, has been found vulnerable to a serious...
Security researcher Navy Titanium have released a technical deep-dive uncovering three severe vulnerabilities affecting pfSense, the popular...
Mozilla has moved swiftly to patch two critical zero-day vulnerabilities in Firefox, both of which were exploited...
Okta has issued a critical security advisory warning developers and enterprises using the Auth0-PHP SDK about a...
A newly disclosed vulnerability in the Tornado Python web framework, tracked as CVE-2025-47287, exposes applications to a...
Researchers have disclosed a reflected cross-site scripting (XSS) vulnerability in Label Studio, an open-source data labeling tool...
A newly reported vulnerability within the GNU C Library (glibc), a fundamental component of countless Linux applications,...
A newly disclosed vulnerability in Microsoft’s Remote Desktop Gateway (RD Gateway) reveals a dangerous race condition that...
A serious security flaw has been identified in the Reflex open-source framework, a tool used to build...
Rockwell Automation has issued a critical security advisory affecting the FactoryTalk Historian-ThingWorx Connector, due to a third-party...
Network Attached Storage (NAS) devices have become essential components of both home and business networks, providing centralized...
A newly disclosed Server-Side Request Forgery (SSRF) vulnerability in SonicWall’s SMA1000 series appliances could allow remote attackers...
Google has released a critical Stable Channel Update for Chrome Desktop, bumping the version to 136.0.7103.113/.114 for...
Node.js Alerts: High-Severity Flaw (CVE-2025-23166) Risks Remote System Crashes! Update Immediately!
Node.js Alerts: High-Severity Flaw (CVE-2025-23166) Risks Remote System Crashes! Update Immediately!
In an important security announcement released recently, the Node.js team has rolled out vital updates for its...
Apache IoTDB, a system designed for managing industrial IoT time-series data, faces a series of security vulnerabilities...
On May 12, 2025, Xerox published Security Bulletin XRX25-009, announcing the release of its April 2025 Security...
Zoom has released a security bulletin addressing multiple vulnerabilities across its Workplace Apps suite. The bulletin details...
A newly disclosed vulnerability in Samsung’s MagicINFO Server, tracked as CVE-2025-4632, poses a severe risk to digital...
In a recent disclosure by Wordfence, two serious vulnerabilities have been discovered in TheGem, a popular premium...
Fortinet has disclosed a critical stack-based buffer overflow vulnerability, tracked as CVE-2025-32756, affecting a wide range of...
Today, 2025, SAP released 16 new Security Notes and updated 2 previously released ones as part of...