The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning regarding a critical command injection vulnerability in PHPMailer (CVE-2016-10033) that has been actively exploited in the wild.
This vulnerability, now included in CISA's Known Exploited Vulnerabilities (KEV) catalog, poses significant risks to...
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a critical warning regarding a server-side request forgery vulnerability in Synacor's Zimbra Collaboration Suite (ZCS) that has been confirmed as exploited in active attacks.
The vulnerability, tracked as CVE-2019-9621, has been added to CISA's Known...
Citrix, a global leader in networking and application delivery, has introduced significant security enhancements in its recent NetScaler builds, specifically version 14.1.47.46 and 13.1.59.19.
However, customers upgrading to these versions are experiencing unexpected authentication issues, prompting Citrix to issue a formal advisory.
Enhanced Security with...
A proof-of-concept exploit for a critical local privilege escalation vulnerability affecting Fedora and SUSE Linux distributions.
The vulnerability, tracked as CVE-2025-6019, allows users in the allow_active group to escalate privileges to root through the udisksd daemon and its backend library libblockdev.
The vulnerability has...
A proof-of-concept (PoC) for CVE-2025-5777, dubbed "CitrixBleed 2," a critical memory disclosure vulnerability affecting Citrix NetScaler devices.
The vulnerability, which bears striking similarities to the infamous 2023 CitrixBleed incident, is currently being exploited in the wild by multiple threat actors, prompting urgent warnings from...
Apache APISIX, a popular open-source API gateway, has disclosed a critical security vulnerability affecting versions prior to 3.12.0 that could enable unauthorized cross-issuer authentication bypass.
The vulnerability, CVE-2025-46647 discovered by security researcher Tiernan Messmer, specifically targets the OpenID Connect plugin when deployed in introspection...