Do Son
A newly discovered vulnerability in HAProxy, the widely used open-source reverse proxy and load balancer, could allow...
Web Security
The Rack project, a key Ruby library providing a minimal and modular interface for web application development,...
Two vulnerabilities were found in WordPress Core, affecting all versions up to and including 6.8.2. Both flaws...
Security researcher Puja Srivastava from Sucuri uncovered two malicious files designed to guarantee persistent attacker access by...
Adobe has broken from its regular patch schedule to release an emergency fix for CVE-2025-54236, a vulnerability...
The Astro project has disclosed a high-severity vulnerability in its Cloudflare adapter, tracked as CVE-2025-58179 (CVSS 7.2)....
A newly disclosed security flaw, tracked as CVE-2025-54370, has been identified in PhpSpreadsheet, a PHP-based library that...
The well-known Certificate Authority Buypass has announced that it will cease issuing TLS/SSL digital certificates in October...
A high-severity zero-day vulnerability in Google Chrome’s V8 JavaScript engine, tracked as CVE-2025-5419, has been exposed, with...
The Directus project has disclosed a critical vulnerability tracked as CVE-2025-55746 (CVSS 9.3) that could allow unauthenticated...
A critical security vulnerability has been disclosed in sha.js, a widely used JavaScript library that implements the...
The asynchronous framework server software and reverse proxy NGINX has recently announced the release of an ACME...
In a recent investigation, Kayleigh Martin, a Security Analyst at Sucuri, uncovered a cunning new tactic used...
Cloudflare, the global internet services provider, has recently introduced an AI Crawler Leaderboard—a dynamic red-and-black list designed...
Sucuri’s Puja Srivastava recently uncovered a stealthy and complex malware campaign targeting WordPress websites that left no...
The Wordfence Threat Intelligence Team has unveiled a powerful malware framework operating under the guise of a...
Last month, a critical vulnerability was reported to Wordfence that now threatens more than 22,000 WordPress websites...
A Server-Side Request Forgery (SSRF) vulnerability has been discovered in the @opennextjs/cloudflare package, potentially allowing unauthenticated users...
A significant surge in brute-force attacks is targeting Apache Tomcat Manager interfaces, according to a new report...
The Spring project has released a security advisory disclosing a vulnerability in the popular Spring Framework, which...