Uncategorized

FortiWeb SQL Injection Vulnerability Allows Execution of Malicious SQL Code

Fortinet has disclosed a critical SQL injection vulnerability affecting multiple versions of FortiWeb, their web application firewall solution. The security…

10 months ago

Zoom for Windows Vulnerabilities Leaves Users Open to DoS Attacks

A critical buffer overflow vulnerabilities in multiple Zoom clients for Windows that could enable authorized users to launch denial-of-service attacks…

10 months ago

MediaTek Patches Critical Chipset Vulnerabilities in July 2025 Security Update

MediaTek has released its July 2025 Product Security Bulletin addressing a comprehensive range of vulnerabilities affecting smartphone, tablet, AIoT, smart…

10 months ago

CISA Alerts on Active Exploits of Ruby on Rails Path Traversal Vulnerability

The Cybersecurity and Infrastructure Security Agency (CISA) has issued a critical warning regarding a path traversal vulnerability in Rails Ruby…

10 months ago

New Hacking Group ‘Payouts King’ Emerges, Claims Breach of 12 Organizations

A new ransomware group called Payouts King has emerged in the cybercriminal landscape, claiming responsibility for attacks against 13 organizations…

10 months ago

DNN Vulnerability: Attackers Can Steal NTLM Credentials Through Unicode Normalization Bypass

A critical vulnerability in DNN (formerly DotNetNuke), one of the oldest open-source content management systems established in 2003. The vulnerability,…

10 months ago

PoC Exploits Unveiled for CitrixBleed2 Vulnerabilities – Attackers Able to Exfiltrate 127 Bytes of Data Per Request

A working proof-of-concept exploit for CVE-2025-5777, a critical memory disclosure vulnerability affecting Citrix NetScaler products that has been dubbed "CitrixBleed…

10 months ago

SAP’s July 2025 Patch Day Addresses 27 Vulnerabilities, Including 7 Critical Issues

SAP released a comprehensive security update on July 8, 2025, addressing 27 new vulnerabilities across its enterprise software portfolio, with…

10 months ago

macOS SMBClient Vulnerabilities Enables RCE and Kernel Crash

A critical vulnerabilities in macOS SMBClient that could allow remote attackers to execute arbitrary code and crash systems through kernel-level…

10 months ago

CISA Alerts to Active Exploitation of PHPMailer Command Injection Vulnerability

The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning regarding a critical command injection vulnerability in PHPMailer…

10 months ago