Vulnerability

A critical vulnerability, CVE-2025-23120, with a CVSS score of 9.9, was identified in Veeam Backup & Replication systems, potentially…

The critical vulnerability identified in NAKIVO Backup and Replication solutions, labeled as CVE-2024-48248, can result in unauthorized arbitrary file reads…

SAP's NetWeaver Application Server Java was found vulnerable to a critical directory traversal flaw identified as CVE-2017-12637. This…

WhatsApp experienced a sophisticated cyber attack exploiting a zero-day vulnerability, leading to the unauthorized deployment of Graphite spyware against journalists…

OpenAI's infrastructure has been compromised by a SSRF vulnerability (CVE-2024-27564) in its ChatGPT application, impacting the financial sector.…

The critical use-after-free vulnerability in the Linux kernel, designated CVE-2024-36904, has significant implications for Red Hat Enterprise Linux and its…

Apache Software has disclosed a critical RCE flaw in their widely-used Tomcat web container. Threat actors, exploiting a public PoC,…

Researchers discovered critical vulnerabilities in Kentico’s Xperience CMS, with potential for unauthenticated remote code execution, due to multiple authentication…

A high-severity authentication vulnerability, identified as CVE-2025-1724, affected ManageEngine Analytics Plus on-premise versions before the 6130 build. Malicious actors could…

The Ballista botnet, taking advantage of an unpatched vulnerability in TP-Link Archer routers, has significantly impacted multiple sectors including manufacturing,…

Siemens has disclosed a critical vulnerability in SINAMICS S200 drive systems that could lead to a complete system compromise. The…

In mid-2024, China-linked cyber espionage group UNC3886 targeted outdated Juniper Networks Junos OS MX routers with custom backdoors. The deployment…