Vulnerabilities

Software Vulnerabilities Zero-Day Exploits Remote Code Execution Exploits Zero-Day Vulnerabilities CVE Exploitation Authentication Bypass Known Exploited Vulnerabilities Software Security

4 ARTICLES

19h ago

ShinyHunters Renew Large-Scale Exploitation of Oracle PeopleSoft with Simple WAF Bypass

Security researchers say the group altered a single character in request paths to evade string‑matching firewalls and reach the PeopleSoft EMHub, enabling web shell and backdoor deployments.

Stories older than 24h

3 ARTICLES

yesterday

Kiteworks Tells Customers to Temporarily Shut Servers After Law‑Enforcement Threat Alert

3 ARTICLES

yesterday

Elementor CSRF Flaw Lets One-Click Links Create Administrator Accounts

3 ARTICLES

yesterday

File-Notification APIs Let Low-Privilege Processes Infer Keystrokes and Website Visits

3 ARTICLES

yesterday

SalesBleed Flaws Let Agentforce Leak CRM Data Without User Interaction

4 ARTICLES

yesterday

CISA Adds WSO2 and Adobe Commerce Flaws to Known Exploited Vulnerabilities Catalog

4 ARTICLES

yesterday

Check Point Issues Emergency Hotfixes After Management Server Zero‑Day Is Found Exploited

4 ARTICLES

4d ago

Researcher Publishes BigDiskBuster Proof‑of‑Concept That Stops Microsoft Defender Updates

3 ARTICLES

4d ago

Researchers Used Anthropic’s Claude to Reach an Internal OpenAI GitHub Repository

3 ARTICLES

4d ago

GAO Finds Gaps in FAA Spectrum Monitoring and Aircraft Messaging Security

3 ARTICLES

4d ago

Apple Closes Official Downgrade Window From iOS 27

6 ARTICLES

5d ago

CISA Adds Zyxel Switch Bug to KEV as Veeam Agent Privilege Flaw Is Publicly Exploited

3 ARTICLES

5d ago

WordPress Fixes Click2Shell Flaw That Could Let Admin Click Trigger Server RCE

6 ARTICLES

5d ago

Retail Rush for Anthropic Pre‑IPO Meets Major Disclosure Gaps

Vulnerabilities

ShinyHunters Renew Large-Scale Exploitation of Oracle PeopleSoft with Simple WAF Bypass

Kiteworks Tells Customers to Temporarily Shut Servers After Law‑Enforcement Threat Alert

Elementor CSRF Flaw Lets One-Click Links Create Administrator Accounts

File-Notification APIs Let Low-Privilege Processes Infer Keystrokes and Website Visits

SalesBleed Flaws Let Agentforce Leak CRM Data Without User Interaction

CISA Adds WSO2 and Adobe Commerce Flaws to Known Exploited Vulnerabilities Catalog

Google’s PageBreak Finds More Than 500 XSS Flaws in Its Web Apps

MikroTrick Chain Lets Attackers Take Over MikroTik Routers

Critical WordPress File-Inclusion Flaw Patched but Exploited Within Hours

FBI Investigates Claim That Hackers Stole Personnel Data From Recruitment Site

Never miss stories about

Vulnerabilities

Critical F5 BIG-IP APM Zero-Day Allows Unauthenticated Remote Code Execution

Chrome 154 Patches 108 Vulnerabilities, Including 11 Critical Flaws

Check Point Issues Emergency Hotfixes After Management Server Zero‑Day Is Found Exploited

Researcher Publishes BigDiskBuster Proof‑of‑Concept That Stops Microsoft Defender Updates

Researchers Used Anthropic’s Claude to Reach an Internal OpenAI GitHub Repository

GAO Finds Gaps in FAA Spectrum Monitoring and Aircraft Messaging Security

Apple Closes Official Downgrade Window From iOS 27

CISA Adds Zyxel Switch Bug to KEV as Veeam Agent Privilege Flaw Is Publicly Exploited

WordPress Fixes Click2Shell Flaw That Could Let Admin Click Trigger Server RCE

Retail Rush for Anthropic Pre‑IPO Meets Major Disclosure Gaps

Never miss stories about

Vulnerabilities