Vulnerability

PHP XXE Injection Vulnerability Allows Attackers to Access Config Files & Private Keys

A newly uncovered XML External Entity (XXE) injection vulnerability in PHP has demonstrated how attackers can bypass multiple security mechanisms…

1 day ago

Over 400 IPs Actively Exploiting Multiple SSRF Vulnerabilities in the Wild

A recent surge in Server-Side Request Forgery (SSRF) exploitation has been detected by GreyNoise, highlighting the ongoing threat posed by…

1 day ago

CISA Warns of Windows NTFS Vulnerability Exploited for Data Theft

The Cybersecurity and Infrastructure Security Agency (CISA) highlighted a critical vulnerability in Microsoft Windows' New Technology File System (NTFS). The…

2 days ago

Zoom Client Security Flaws Could Lead to Data Breaches

Recent security bulletins from Zoom have highlighted several high-severity vulnerabilities in their client software, raising concerns about potential data breaches…

2 days ago

macOS NULL Pointer Dereference Vulnerability Allow Attackers Exploits Kernel

Historically, NULL pointer dereferences have been a significant vulnerability in operating systems, including macOS. These occur when software attempts to…

2 days ago

Apache Camel Vulnerability Allows Attackers to Inject Arbitrary Headers

A newly disclosed security vulnerability in Apache Camel, tracked as CVE-2025-27636, has raised alarms across the cybersecurity community. The flaw allows…

2 days ago

SCADA Vulnerabilities Allow Attackers to Cause DoS and Gain Elevated Privileges

A recent security assessment by Palo Alto Networks' Unit 42 has uncovered multiple vulnerabilities in the ICONICS Suite, a widely…

2 days ago

PoC Released for SolarWinds Web Help Desk Vulnerability Exposing Passwords

A Proof-of-Concept (PoC) has been released for a significant vulnerability discovered in SolarWinds Web Help Desk, exposing encrypted passwords and…

2 days ago

Apache Pinot Vulnerability Allows Attackers to Bypass Authentication

A significant security vulnerability affecting Apache Pinot, an open-source distributed data store designed for real-time analytics, has been publicly disclosed.…

2 days ago

CISA Added 3 Ivanti Endpoint Manager Bugs to Wildly Exploited Vulnerabilities Catalog

The Cybersecurity and Infrastructure Security Agency (CISA) has expanded its Known Exploited Vulnerabilities (KEV) catalog with the addition of three…

2 days ago