Vulnerability

ServiceNow Vulnerability Exposed Sensitive Data to Attackers

A newly disclosed high-severity vulnerability in ServiceNow’s cloud platform, dubbed Count(er) Strike, could have allowed malicious actors to exfiltrate personally…

10 months ago

Call of Duty Exploit – RCE Vulnerability Allows Gamers to Hack Each Other’s PCs

Activision has taken the PC version of Call of Duty: WWII offline following reports of a critical security vulnerability that…

10 months ago

Critical mcp-remote Vulnerability Enables Remote Code Execution in LLM Clients

A critical security vulnerability in mcp-remote, a widely-used proxy tool that enables Large Language Model applications to connect with remote…

10 months ago

Critical Windows BitLocker Vulnerability Lets Attackers Bypass Encryption

A new security vulnerability in Windows BitLocker that could allow attackers to bypass the encryption software's security features through a…

10 months ago

Critical Citrix VDA Vulnerability Allows Attackers to Gain SYSTEM-Level Access on Windows

A high-severity security vulnerability affecting Citrix Virtual Apps and Desktops and Citrix DaaS systems worldwide. The vulnerability, designated as CVE-2025-6759,…

10 months ago

FortiWeb SQL Injection Vulnerability Allows Execution of Malicious SQL Code

Fortinet has disclosed a critical SQL injection vulnerability affecting multiple versions of FortiWeb, their web application firewall solution. The security…

10 months ago

CISA Alerts on Active Exploits of Ruby on Rails Path Traversal Vulnerability

The Cybersecurity and Infrastructure Security Agency (CISA) has issued a critical warning regarding a path traversal vulnerability in Rails Ruby…

10 months ago

DNN Vulnerability: Attackers Can Steal NTLM Credentials Through Unicode Normalization Bypass

A critical vulnerability in DNN (formerly DotNetNuke), one of the oldest open-source content management systems established in 2003. The vulnerability,…

10 months ago

CISA Alerts to Active Exploitation of PHPMailer Command Injection Vulnerability

The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning regarding a critical command injection vulnerability in PHPMailer…

10 months ago

CISA Issues Alert on Active Exploitation of Zimbra Collaboration Suite Vulnerability

The Cybersecurity and Infrastructure Security Agency (CISA) has issued a critical warning regarding a server-side request forgery vulnerability in Synacor's…

10 months ago