Vulnerability

High-severity command injection vulnerabilities (CVE-2025-13207 and CVE-2024-24481, CVSS 8.8) have been discovered in Tenda’s N300 Wi-Fi 4G LTE…

Critical Vulnerabilities in Chainlit Framework Expose AI Systems to Data Theft and Server Compromise Researchers at Zafran Labs have uncovered…

Critical Vulnerabilities in Chainlit AI Framework Expose Sensitive Data and Enable Lateral Movement Security researchers at Zafran Security have uncovered…

A critical vulnerability in WhatsApp’s contact discovery feature was exposed by researchers at the University of Vienna, enabling attackers…

Security researchers from the University of Vienna exposed a critical vulnerability in WhatsApp’s contact discovery mechanism, enabling the enumeration…

A critical security flaw (CVE-2025-11001, CVSS 7.0) in 7-Zip is being actively exploited in the wild, allowing remote attackers…

Cybersecurity researchers at SquareX uncovered a critical **vulnerability** in **Comet**, Perplexity’s AI-powered browser, tied to a hidden **MCP API*…

SquareX researchers discovered a critical vulnerability in **Comet**, Perplexity’s AI-powered agentic browser, where hidden built-in extensions (**Comet Analytics** and…

Researchers in Austria exploited a long-standing vulnerability in **WhatsApp** to harvest personal data from over **3.5 billion users**, marking…

The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning about CVE-2025-58034, a critical OS command injection vulnerability…

The critical CVE-2025-64446 vulnerability in Fortinet FortiWeb WAF allows unauthenticated attackers to gain administrative access via a relative path-traversal flaw…

A critical **OS command injection vulnerability (CVE-2025-58034, CVSS 6.7)** was discovered in **Fortinet’s FortiWeb security platform**, with confirmed…