Vulnerability

A critical vulnerability chain in NVIDIA's Triton Inference Server allows unauthenticated attackers to achieve complete remote code execution…

A critical vulnerability in Streamlit's st.file_uploader component allowed attackers to bypass file type restrictions and gain…

A critical vulnerability in HashiCorp's Vault software, tracked as CVE-2025-6000, allows privileged operators to execute arbitrary code on…

Researchers exploited a previously unknown Use-After-Free (UAF) vulnerability in the Linux HFSC queuing discipline to compromise all Google kernelCTF instances…

A critical security vulnerability affecting multiple FUJIFILM printer models could allow attackers to trigger denial-of-service (DoS) conditions through malicious network…

A vulnerability called CurXecute in the AI-powered code editor Cursor allows attackers to execute remote code with developer privileges. This…

CISA added CVE-2025-54253, a critical misconfiguration vulnerability in Adobe Experience Manager (AEM) Forms on Java Enterprise Edition (JEE), to its…

Over 48,800 internet-exposed Cisco Adaptive Security Appliance (ASA) and Firewall Threat Defense (FTD) devices remain vulnerable to two critical…

Pi-hole, a network-level ad-blocker, disclosed a security vulnerability in the GiveWP WordPress donation plugin that exposed donor names and email…

A critical security vulnerability in SUSE Manager allows unauthenticated attackers to execute arbitrary commands with root privileges. This flaw, tracked…

A critical zero-day vulnerability in Microsoft SharePoint servers, dubbed 'ToolShell', has exposed over 17,000 servers to internet-based…

A significant zero-day vulnerability in CrushFTP has been disclosed, allowing unauthenticated attackers to achieve complete remote code execution on vulnerable…