Vulnerability

Fortinet disclosed a critical OS command injection vulnerability (CVE-2025-25256) in its **FortiSIEM** platform, a security information and event management (SIEM)…

WinRAR, a widely used file compression software, faced a critical **CVE-2025-8088** vulnerability—a **path traversal flaw** actively exploited by the…

OneDigital Data Breach Exposes Client Personal Information via Compromised Drift Application Between August 12 and August 18, 2025, a data…

A critical vulnerability (CVE-2025-44179) in HITRON's smart bus systems allows attackers to exploit hard-coded credentials and unauthenticated access…

A severe vulnerability in Apache bRPC (CVE-2025-54472) allows attackers to crash services by exploiting unlimited memory allocation in the Redis…

A severe vulnerability in the automaker's dealer portal allowed unauthorized attackers to register dealer accounts, escalate privileges to…

A security vulnerability (CVE-2025-55188) in 7-Zip software allows attackers to perform arbitrary file writes during archive extraction, potentially leading to…

A critical vulnerability was discovered in Lenovo webcams, allowing remote hackers to weaponize them into BadUSB attack tools. The flaw,…

A critical vulnerability in iOS (CVE-2025-24091) allowed any sandboxed application or widget extension to send low-level Darwin notifications that forced…

The discovery of the SureTriggers vulnerability, with a CVSS score of 8.1, has exposed over 100,000 websites to…

Maritz Holdings Inc. Suffers Data Breach via Oracle E-Business Suite Vulnerability Maritz Holdings Inc., a Missouri-based management consulting firm with…

SUNY Research Foundation Hit by Zero-Day Data Breach, Exposing Employee Personal Data The SUNY Research Foundation, based in Albany, New…