CWE-22 - Path Traversal

Critical GitLab Vulnerabilities Exploited Within Hours of Disclosure

Critical RCE Vulnerability in Windows IKE Actively Exploited

SonicWall SMA1000 Faces Critical Zero-Day Exploitation

CISA Warns of Exploited Vulnerabilities in ProFTPD, ONLYOFFICE, Strapi, and More

Critical WordPress Vulnerability CVE-2026-87902 Exploited Within Hours of Disclosure

Critical Vulnerabilities in AhsayCBS Allow Remote Code Execution

Gamaredon Exploits WinRAR Vulnerability in Ongoing Ukraine Campaign

Critical FortiMail Vulnerability Actively Exploited in the Wild

Critical CVE-2026-48768 Vulnerability in TypeBot Exposes Users to File Upload Attacks

Critical Cisco Secure Email Gateway Vulnerability Exploited

Critical Remote Code Execution Flaw Discovered in Flowise MCP Server

Ubiquiti Patches Critical Vulnerabilities in UniFi OS Exposing Remote Attacks

Critical Vulnerability in NASA Ground Control Software Allows Unauthenticated Access

China-Aligned Hackers Exploit Tencent's Sogou Flaw for Backdoor Deployment

CISA Alerts on Critical Flaws in SimpleHelp, Samsung MagicINFO, and D-Link Devices

Critical SSTI Vulnerability in FOSSBilling Exposes Databases to RCE Attacks

Exploitation of WinRAR CVE-2025-8088 Threatens Ukrainian Organizations

Critical Command Injection and DoS Vulnerabilities in openSUSE pcp

Path Traversal Vulnerability in WinRAR Exploited by RomCom Group

Critical Vulnerabilities in openSUSE erlang27 Require Immediate Attention

Critical Vulnerability CVE-2026-2743 in SeppMail Exposes Users to Remote Code Execution

Multiple Critical CVEs Exploited in Cybersecurity Attacks

Critical Vulnerability CVE-2026-101894 Exploited via Node.js Archive Extraction

Multiple Vulnerabilities Found in MariaDB Affecting Security

Amazon Q Developer Vulnerability Enables Cloud Credential Theft

Critical Security Flaws in Fedora RPKI and Syslog Components

Multiple Oracle Linux Versions Face Critical Vulnerabilities in PCP Tools

Critical Vulnerabilities in perl-DBI Affecting SUSE Systems

Critical Vulnerabilities in Fedora's OpenSSH and libssh Libraries

Fedora Caddy Security Updates Address Multiple CVEs

GitLab Issues Urgent Patch for Critical AI Gateway RCE Flaw

Critical Vulnerabilities Discovered in CrowdStrike LogScale and Other Security Tools

Critical Unauthenticated Path Traversal Vulnerability in WordPress

Ransomware Exploits Critical VMware vCenter Vulnerability CVE-2026-59310

Critical Exploitation of Ruby on Rails Vulnerability CVE-2026-66066 Confirmed

Mass Scanning Campaign Targets Exposed Vite Servers for Cloud Credentials

Critical Vulnerabilities in ConnectWise ScreenConnect Exploited in Active Attacks

Active Exploitation of SolarWinds Serv-U Flaw CVE-2026-28318

Critical Vulnerabilities in WatchGuard Agent Enable Remote Code Execution

Critical CVE-2026-57331 Allows Arbitrary File Deletion in Videochat Plugin

CISA Issues Urgent Warning on Actively Exploited LiteSpeed cPanel Plugin Vulnerability

Microsoft September 2026 Patch Tuesday: Record 974 Vulnerabilities Addressed

U.S. CISA adds Palo Alto Networks PAN-OS, Ahsay AhsayCBS, and Cisco Secure Email ...

Silent Lynx: Kazakhstan-Linked Hackers Target Russian Refinery and Government

What Is Ai Web App Pentesting

Palo Alto Networks Patches PAN-OS Zero

Palo Alto Networks Patches PAN-OS Zero

Cloud Commander Through Path Traversal Via Get Api V1 Pack

5a0c4cbab8e49ac0669d126c854da95e

91c024591f425e26200884d5e1d5ba972377968b

CVE-2026-105133 and CVE-2026-105134

CVE Alert: CVE-2026-110690 – coderaiser

CVE Alert: CVE-2026-88829 – Red Hat

CVE Alert: CVE-2026-90954 – Red Hat

Unit 42 Uncovers PEERSTITCH, a Stealthy FortiGate Implant

Ahsay CBS Auth Bypass RCE

Richdocumentscode Issues 354

Cisco Warns of Active Attacks Exploiting New Critical Secure Email Gateway Vulnerability

Cisco patches new Secure Email Gateway zero

Digital Infrastructure Filemanager Path Traversal Rw

CVE Alert: CVE-2026-110115 – risesoft-y9 – Digital

Security Advisory Bulletin 070

Visual Studio Copilot and SSMS Remote Code Execution (CVE-2026-103572)

LG Smart TVs Vulnerable to Pre

Old vulnerabilities in Apache Struts, BIND, and ProFTPD targeted by attackers

U.S. CISA adds ProFTPD, ONLYOFFICE Docs, Strapi, Apache Struts, and ISC BIND flaws to ...

A vulnerability was found in Telegram that allowed stealing authorization data and gaining ...

1,467, up from the 492 instances

CISA Orders Federal Agencies to Patch Five Exploited Flaws by October 11 Amid Flax ...

Flax Typhoon Exploits Five Flaws as CISA Sets October 11 Deadline for Federal Agencies

SonicWall parchea falla crítica SSRF en appliances SMA1000 — sin evidencia de explotación aún

ONLYOFFICE Docs Remote Code Execution Vulnerability

CVE Alert: CVE-2021-3199 – n/a – n/a

HackerOne Bug Bounty Disclosure: data-index-directory-abuse

DB-GPT AI Agent Platform: Two Critical RCE CVEs at the Agent Data Access Layer

Cisco Talos reported

Exploit for CVE-2026

SonicWall fixes maximum severity SMA1000 vulnerability

DB-GPT AI Agent Platform: Two Critical RCE CVEs at the Agent Data Access Layer