Vulnerability

Threat actors are actively exploiting a recently fixed remote code execution vulnerability (CVE-2025-47812) in Wing FTP Server. The vulnerability allows…

The Opossum attack exploits a sophisticated cross-protocol application layer desynchronization vulnerability that compromises TLS-based communications. This attack affects critical protocols…

A critical remote code execution vulnerability in GeoServer, designated CVE-2024-36401, has been exploited by cybercriminals to deploy cryptocurrency mining malware.…

A vulnerability in McHire, the AI-powered recruitment platform used by a vast majority of McDonald’s franchisees, exposed the personal…

A critical stack-based buffer overflow vulnerability in the D-Link DIR-825 Rev.B 2.10 router firmware allows unauthenticated, zero-click remote…

A critical vulnerability in eSIM technology, specifically targeting Java Card Virtual Machine implementation, allowed attackers to clone mobile subscriber profiles…

Recently, two vulnerabilities were discovered in specific Zoom Clients for Windows, which could enable attackers to launch Denial of Service…

Nippon Steel Solutions experienced a significant data breach involving a zero-day cyber attack that exploited a previously unknown software vulnerability…

A critical security vulnerability, CVE-2025-25257, was discovered in FortiWeb web application firewalls, allowing unauthenticated attackers to execute unauthorized SQL commands…

A new vulnerability in ServiceNow, dubbed Count(er) Strike, allows low-privileged users to extract sensitive data from tables to which…

Synacor's Zimbra Collaboration Suite (ZCS) has a critical vulnerability (CVE-2019-9621) that allows attackers to manipulate the server into…

Multiple vulnerabilities in macOS SMBClient, identified as CVE-2025-24269 and CVE-2025-24235, and an unassigned flaw, allow attackers to execute arbitrary code…