Vulnerability

A critical zero-day vulnerability (CVE-2025-33053) in WebDAV implementations allows remote code execution. Advanced persistent threat (APT) groups have actively exploited…

A comprehensive security investigation revealed critical vulnerabilities in OneLogin’s Active Directory (AD) Connector service, exposing authentication credentials and enabling…

A newly disclosed command injection vulnerability in Palo Alto Networks’ PAN-OS operating system poses significant security risks to enterprise firewall…

Multiple critical security vulnerabilities in the Trend Micro Apex One enterprise security platform could enable attackers to inject malicious code…

A high-severity security vulnerability, CVE-2025-47950, has been discovered in CoreDNS, allowing remote attackers to exhaust server memory through DNS-over-QUIC (DoQ)…

Critical UEFI Flaw (CVE-2025-3052) Exposes Systems to Bootkit Attacks A newly disclosed memory corruption vulnerability in UEFI firmware, tracked as…

Microsoft Patches Critical Zero-Click Flaw in Microsoft 365 Copilot Microsoft has addressed a severe "zero-click" vulnerability in its…

A severe security vulnerability identified as CVE-2025-3835 has been found in ManageEngine Exchange Reporter Plus. This vulnerability allows attackers to…

Microsoft and Adobe Address Critical Vulnerabilities in June 2025 Patch Tuesday Microsoft’s June 2025 Patch Tuesday released fixes for…

**Cisco Patches High-Severity Cloud Vulnerability in Identity Services Engine** Cisco has released an urgent advisory addressing a high-severity vulnerability (CVE-2025-20286)…

Over 84,000 Roundcube webmail installations are vulnerable to CVE-2025-49113, a critical remote code execution (RCE) flaw with a public…

A critical cross-site scripting (XSS) vulnerability in the popular Jenkins Gatling Plugin allows attackers to bypass Content-Security-Policy (CSP) protections. The…