VULNS 41
- Exploitation of React2Shell Surges
- Old tech, new vulnerabilities - NTLM abuse, ongoing exploitation in 2025
- Weaponized file name flaw makes updating glob an urgent job
- RondoDox Exploits Unpatched XWiki Servers to Pull More Devices Into Its Botnet
- Siemens COMOS
- Microsoft Patch Tuesday for November 2025 — Snort rules and prominent vulnerabilities
- CISA issues ICS advisories on Schneider Electric, Vertikal Systems vulnerabilities; adds DELMIA Apriso flaws to KEV Catalog
- Chrome Zero-Day Exploitation Linked to Hacking Team Spyware
- CISA confirms hackers exploited Oracle E-Business Suite SSRF flaw
- Two New Windows Zero-Days Exploited in the Wild — One Affects Every Version Ever Shipped
- New Oracle E-Business Suite Bug Could Let Hackers Access Data Without Login
- Patch Now Dell UnityVSA Flaw Allows Command Execution Without Login
- Broadcom Fails to Disclose Zero-Day Exploitation of VMware Vulnerability
- Critical CVSS 10 Flaw in GoAnywhere File Transfer Threatens 20,000 Systems
- Apple rushes out fix for active zero-day in iOS and macOS
- Flaws in Software Used by Hundreds of Cities and Towns Exposed Sensitive Data
- Microsoft August 2025 Patch Tuesday fixes one zero-day, 107 flaws
- OWASP AIVSS targets agentic AI risk
- Critical Vulnerability Impacting Over 100K Sites Patched in Everest Forms Plugin
- ReVault! When your SoC turns against you…
- Stack Overflows, Heap Overflows, and Existential Dread (SonicWall SMA100 CVE-2025-40596, CVE-2025-40597 and CVE-2025-40598)
- Citrix NetScaler Devices Memory Leak CVE-2025-5777
- Critical Vulnerabilities Found in Tridium Niagara Framework
- Account Takeover Vulnerability Affecting Over 400K Installations Patched in Post SMTP Plugin
- The Internet Red Button a 2016 Bug Still Lets Anyone Kill Solar Farms in 3 Clicks
- NVIDIAScape - Critical NVIDIA AI Vulnerability A Three-Line Container Escape in NVIDIA Container Toolkit (CVE-2025-23266)
- eSIM Vulnerability in Kigen's eUICC Cards Exposes Billions of IoT Devices to Malicious Attacks
- Pre-Auth SQL Injection to RCE - Fortinet FortiWeb Fabric Connector (CVE-2025-25257)
- Wing FTP Server Remote Code Execution (CVE-2025-47812) Exploited in the Wild
- July Patch Tuesday offers 127 fixes
- Asus and Adobe vulnerabilities
- CVE-2025-5777 CitrixBleed 2 Write-Up… Maybe?
- Critical vulnerabilities in NetScaler ADC exploited in-the-wild everything you need to know
- How Much More Must We Bleed? - Citrix NetScaler Memory Disclosure (CitrixBleed 2 CVE-2025-5777)
- Cl0p cybercrime gang's data exfiltration tool found vulnerable to RCE attacks
- Critical Vulnerability in Microsens Devices Exposes Systems to Hackers
- Acer Control Center Flaw Lets Attackers Run Malicious Code as Elevated User
- Researcher Finds Five Zero-Days and 20+ Misconfigurations in Salesforce Cloud
- Roundcube Webmail under fire critical exploit found after a decade
- Multiple CVEs in Infoblox NetMRI RCE, Auth Bypass, SQLi, and File Read Vulnerabilities
- Exploits and vulnerabilities in Q1 2025