Vulnerabilities & Patches
CVEs, zero-days, vendor patch advisories, exploit research and proof-of-concept disclosures.
-
VulnerabilitiesPHP Patches Two Critical Flaws That Let Attackers Run Code on Web Servers
Anyone running a PHP website has an update to install today. On October 21 the PHP…
-
VulnerabilitiesSuspected AI Agent Breached Dutch Disclosure Group DIVD Through Two Zammad Zero Days
The volunteers who spend their evenings warning strangers about exposed servers have…
-
VulnerabilitiesNetScaler Admins Were Told to Shut Down Before Citrix Explained Why
Over the weekend, administrators who run Citrix NetScaler appliances began getting…
-
VulnerabilitiesCisco Email Gateways Can Be Taken Over by a Single Crafted Message
An attacker who wants to take control of a Cisco Secure Email Gateway does not need a…
-
VulnerabilitiesGitLab Flaw Rated 10.0 Lets Outsiders Read Server Files, and Scans Have Begun
GitLab has fixed a vulnerability in its self managed product that lets someone with no…
-
VulnerabilitiesPaperCut Needed a Second Emergency Patch After Researchers Bypassed the First
Organizations that run PaperCut print management servers had a rough end to the week. On…
-
VulnerabilitiesAugust Patch Tuesday Brings Roughly 400 Fixes and a Windows Zero Day Under Attack
Microsoft's August security release landed on Tuesday with fixes for roughly 400…
-
VulnerabilitiesOne-Character Linux Kernel Bug Hands Local Users Root and Container Escape
Researchers at Exodus Intelligence posted an illustrated step-by-step way to do a…
-
VulnerabilitiesNew 7-Zip Flaw (CVE-2026-48095) Enables Code Execution Through Crafted Archives
A new CVE (CVE-2026-48095) in 7-Zip means that malicious archive processing and…
-
VulnerabilitiesCritical Veeam Backup and Replication Bug Lets Any Domain User Run Code
Veeam issued security updates for the Backup & Replication critical security weakness…
-
VulnerabilitiesFFmpeg PixelSmash Flaw Turns Malicious Video Files Into Remote Code Execution
The FFmpeg issue, known as "PixelSmash", allows for Remote Code Execution (RCE) when…
-
VulnerabilitiesAI Cyberattacks: Two Years of Insane Vulnerabilities
SAN FRANCISCO – As always, each RSA Conference has its share of buzzwords: Cloud…
-
VulnerabilitiesMicrosoft May 2026 Patch Tuesday fixes 120 flaws, no zero-days
This Patch Tuesday includes fixes for 17 "critical" bugs; 14 are RCEs, 2 are EOPs and 1…
-
VulnerabilitiesHackers Used AI to Develop First Known Zero-Day 2FA Bypass for Mass Exploitation
Google reported yesterday that it had identified an unknown threat actor utilising a…
-
VulnerabilitiesCybercriminals Take Advantage of Serious Langflow Vulnerability Within 20 Hours
Cybercriminals have showcased their rapid response capabilities by exploiting a…
-
VulnerabilitiesAcrobat Reader zero-day vulnerability actively targeted for several months
Security researcher Haifei Li has uncovered that unidentified attackers have been…
-
VulnerabilitiesClaude assists researcher in uncovering ten-year-old Apache ActiveMQ remote code execution flaw CVE-2026-34197
In a recent showcase of how AI tools can assist in identifying software vulnerabilities…
-
Vulnerabilities30-Year-Old Vulnerability Discovered in libpng Library
Developers have successfully addressed a longstanding vulnerability in the widely used…
-
VulnerabilitiesMicrosoft Addresses Exploited SharePoint Vulnerability and Fixes 160 Additional Security Flaws
Microsoft has released its most recent Patch Tuesday updates addressing 165…
-
Vulnerabilities10 Persistent Software Bugs That Took Ages to Fix
In 2021, a significant vulnerability was uncovered in a system fundamental to modern…
-
VulnerabilitiesVulnerability may allow hackers to seize control of Juniper Networks PTX core routers
Network administrators using Juniper PTX series routers are being urged to apply patches…
-
VulnerabilitiesActive Attacks Exploit Critical BeyondTrust RS Vulnerability
Researchers are sounding the alarm about a serious vulnerability that was patched this…
-
VulnerabilitiesGoogle reports exploit for new Chrome zero-day vulnerability
Google has issued a warning to IT administrators regarding a newly discovered zero-day…
-
VulnerabilitiesVulnerabilities in four VS Code extensions exposed 128 million installations to risk
Recent research has uncovered critical and high-severity vulnerabilities in four popular…
-
VulnerabilitiesFour Common Vulnerability Management Mistakes and How to Correct Them
Vulnerability management has evolved significantly over the past five years. If you are…