Vulnerability

CISA Warns of Fortinet FortiWeb OS Command Injection Vulnerability Exploited in the Wild

The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning about a critical vulnerability affecting Fortinet FortiWeb appliances…

2 days ago

Palo Alto PAN-OS Firewall Vulnerability Let Attackers Reboot Firewall by Sending Malicious Packet

Palo Alto Networks has disclosed a critical denial-of-service vulnerability in its PAN-OS firewall software that allows unauthenticated attackers to remotely…

1 week ago

Zoom Workplace for Windows Vulnerability Allow Users to Escalate Privilege

A security vulnerability has been discovered in Zoom Workplace VDI Client for Windows that could allow attackers to gain elevated…

1 week ago

Critical Vulnerability in Popular NPM Library Exposes AI and NLP Apps to Remote Code Execution

A critical security flaw has been discovered in the widely used npm package expr-eval, potentially exposing AI and natural language…

2 weeks ago

Hackers Can Attack Active Directory Sites to Escalate Privileges and Domain Compromise

Active Directory sites are designed to optimize network performance across geographically separated organizations by managing replication and authentication across multiple…

2 weeks ago

Cisco Unified Contact Center Express Vulnerabilities Let Remote Attacker Execute Malicious Code

Cisco has disclosed multiple critical vulnerabilities in Unified Contact Center Express (CCX) that allow unauthenticated remote attackers to execute malicious…

2 weeks ago

Hackers Actively Scanning Internet to Exploit XWiki Remote Code Execution Vulnerability

A critical remote code execution vulnerability affecting XWiki's SolrSearch component has become the target of widespread exploitation attempts, prompting cybersecurity…

2 weeks ago

AMD Zen 5 Processors RDSEED Vulnerability Breaks Integrity With Randomness

AMD has disclosed a critical vulnerability affecting its Zen 5 processor lineup that compromises the reliability of random number generation,…

2 weeks ago

CISA Warns of Linux Kernel Use-After-Free Vulnerability Exploited in Attacks to Deploy Ransomware

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent alert about a critical use-after-free vulnerability in the…

3 weeks ago

WordPress Plugin Vulnerability Exposes 7 Million Sites to XSS Attack

A critical cross-site scripting (XSS) vulnerability has been discovered in the popular LiteSpeed Cache plugin for WordPress, affecting millions of…

3 weeks ago