Technology ❯ Cybersecurity ❯ Vulnerabilities

Web Security

WebKit Content Management Systems Incident Analysis Mass Assignment Browser Vulnerabilities Cross-Site Scripting Proxy Servers Hard-coded Passwords WordPress Vulnerabilities CVE-2025-43529 CVE-2025-11533 Client-Side Security Authentication Issues Chromium WebKit Exploits WordPress Plugins WebKit Flaw VSCode Security Cross-Origin Issues Same Origin Policy PHP Vulnerabilities

Elementor Pro Vulnerability Fueled Widespread Webshell Attacks

A file-upload validation bug lets unauthenticated actors place executable PHP files in form upload folders, forcing urgent updates and scans.

Squidbleed Lets Shared Squid Proxies Leak Other Users' HTTP Requests

VS Code Zero-Day Lets Attackers Steal Full GitHub OAuth Tokens

CISA Adds Exploited Mirasvit Magento Flaw to KEV After Active RCE Attacks

Google Posts Proof-of-Concept for Unpatched Chromium Flaw

JDownloader Restores Site After Hack Replaced Official Installers With Malware

Apple Rolls Out First Background Security Improvements to Fix WebKit Same-Origin Bug

Chrome Flaw Let Malicious Extensions Hijack Gemini Live Before January Patch

Apple Urges iOS 26.2 Update as Agencies Recommend Weekly iPhone Power-Offs After WebKit Exploits

WordPress Modular DS Flaw Under Active Attack as Patch Ships to Block Admin Takeovers

CISA Adds Gladinet and CWP Flaws to KEV, Setting Nov. 25 Federal Remediation Deadline

White‑Hat Researcher Exposes Broad McDonald’s Security Failures, Prompting Fixes

Apple Releases Cross-Platform Patches for Zero-Day in WebKit’s ANGLE Engine