Do Son CISA has added Linux kernel vulnerabilities CVE-2024-53197 and CVE-2024-53150 to its KEV catalog, warning of active exploitation. Learn how these flaws are used in Android device exploits and what steps to take.
Vulnerability
Research reveals Cisco CVE-2018-0171, a 7-year-old Smart Install RCE vulnerability, remains active, exposing over 1,200 devices. Learn how attackers exploit it and how to protect your network.
A critical vulnerability (CVE-2025-3102) in the SureTriggers WordPress plugin allows unauthenticated admin account creation, potentially exposing over 100,000 sites to full takeover. Update to version 1.0.79 immediately.
Dell has released a security advisory addressing vulnerabilities in PowerScale OneFS, including potential for takeover of privileged accounts and denial of service. Upgrade information and workarounds are provided.
CISA has added critical vulnerabilities affecting Windows CLFS (CVE-2025-29824) and Gladinet CentreStack (CVE-2025-30406) to its Known Exploited Vulnerabilities Catalog. Learn about the threats and the urgent need to apply patches.Sources and related content
Siemens ProductCERT issued a security advisory detailing critical vulnerabilities in the SENTRON 7KT PAC1260 Data Manager. The flaws could allow remote attackers to execute code, bypass authentication, and more.
A vulnerability (CVE-2024-12556) in Kibana allows code injection via prototype pollution, file upload, and path traversal. Upgrade to the latest version or disable the integration assistant to mitigate this high-severity security risk.
The latest Chrome update addresses a high-severity "use after free" vulnerability in Site Isolation (CVE-2025-3066). Learn about the security risk and the importance of updating your Chrome browser
Microsoft's April 2025 Patch Tuesday addresses 134 vulnerabilities, including a zero-day under active exploitation. This update covers critical RCE flaws in Windows, Office, and more
A security flaw in Apache's mod_auth_openidc module can expose protected web content to unauthenticated users. Patch or mitigate to secure your server
Fortinet has addressed a critical vulnerability (CVE-2024-48887) in FortiSwitch that allows unauthenticated attackers to change admin passwords. Upgrade to the latest version to secure your devices.
Siemens security advisories detail a critical authentication vulnerability (CVE-2024-54092) in Industrial Edge Devices, allowing for potential impersonation
Learn about the Pexip Infinity vulnerability and its critical heap-based buffer overflow flaw that poses severe security risks.
Learn about the XZ Utils vulnerability and its impact on data compression tools. Understand CVE-2025-31115 and its risks.
Learn about the Commvault vulnerability affecting webservers. Understand how to protect sensitive data with timely patches.
CVE-2025-20206 affects Cisco Secure Client for Windows, potentially allowing attackers to execute arbitrary code seamlessly.
Learn about the Better Auth vulnerability that allows attackers to bypass security measures and take over user accounts.
Discover the newly disclosed vulnerability called 'Time Bandit' in ChatGPT-4o, allowing attackers to bypass safety restrictions and generate illicit content.
Discover the security vulnerabilities in DeepSeek R1, a new AI model developed in China. Learn about its potential for misuse and implications for cybersecurity.
Learn about a discovered vulnerability in ChatGPT's web crawler that allows for potential DDoS attacks on websites. Understand the implications of this flaw.
Stay informed about the latest Mitel MiCollab vulnerability and learn how to protect your sensitive business data.
Uncover the LogoFAIL vulnerability and Bootkitty, the new UEFI bootkit targeting Linux. Explore the impact of this emerging firmware-based threat.