Proof-of-concept exploit code has been published for a critical remote code execution flaw in protobuf.js, a widely used ...
Cisco patches four CVEs up to CVSS 9.9 in ISE and Webex, preventing code execution and user impersonation risks.
Hackers have been targeting a vulnerability in discontinued TP-Link routers for a year, so far failing to successfully ...
ShowDoc CVE-2025-0520 exploited due to unpatched versions before 2.8.7, enabling remote code execution on 2,000+ instances.
CISA has expanded the KEV catalog to include seven vulnerabilities, including Windows flaws that lead to privilege escalation ...
The government has issued an advisory regarding a critical vulnerability in Fortinet’s FortiClient EMS, which is affecting ...
Unsafe defaults in MCP configurations open servers to possible remote code execution, according to security researchers who ...
Adobe patches a critical PDF flaw exploited for months, allowing attackers to bypass sandbox protections and deliver malware.
A new malware family named 'AgingFly' has been identified in attacks against local governments and hospitals that steal ...
The 9.1-CVSS vulnerability enables attackers to circumvent RCE protections in the de facto template engine for the Java ...
North Korea's Sapphire Sleet uses fake job offers and phony Zoom updates to deliver ClickFix attacks that steal credentials ...
However, in a report published on April 15, researchers at Ox Security claimed that a flaw in the protocol could enable ...