Vulnerability

Multiple severe security vulnerabilities in HPE Insight Remote Support (IRS) platform that could allow attackers to execute remote code, traverse…

A critical vulnerability (CVE-2025-5601) in Wireshark allows attackers to trigger denial-of-service (DoS) attacks through packet injection or malformed capture files.…

A previously unknown zero-click vulnerability in Apple’s iMessage, dubbed 'NICKNAME,' affected iOS versions up to 18.1.…

A critical denial-of-service vulnerability in Apache Tomcat has been publicly exposed, affecting servers running versions 10.1.10 through 10.…

Hackers are exploiting a critical vulnerability in the Roundcube webmail application, which is widely used by hosting providers like GoDaddy.…

A significant vulnerability in Cisco’s Integrated Management Controller (IMC) allows malicious actors to gain elevated privileges and access internal…

Multiple Cross-Site Scripting (XSS) vulnerabilities in the VMware NSX network virtualization platform could allow malicious actors to inject and execute…

A critical zero-day vulnerability in Google Chrome’s V8 JavaScript engine, identified as CVE-2025-5419, has been actively exploited by cybercriminals.…

Panasonic fell victim to subdomain hijacking by the Hazy Hawk threat group, which exploited misconfigured DNS records to spread malware…

IBM experienced a cloud outage on Wednesday that lasted over four hours, causing users to be unable to access the…

The Cybersecurity and Infrastructure Security Agency (CISA) issued a warning about active exploitation of CVE-2025-3935, a critical ConnectWise ScreenConnect vulnerability…

A critical, unauthenticated remote code execution (RCE) vulnerability in vBulletin forum software is being actively exploited. The vulnerability, assigned CVE-2025-48827…