Vulnerabilities

Multiple ModSecurity Vulnerabilities Let Attackers Bypass WAF Rules and Execute Malicious Requests

OWASP ModSecurity has disclosed multiple vulnerabilities that could let attackers bypass web application firewall rules, evade request and response inspection,…

1 week ago

Hackers Exploit Citrix NetScaler Zero-Day to Gain Root Access and Deploy Web Shells

Threat actors are actively exploiting a critical zero-day vulnerability in Citrix NetScaler, identified as CVE-2026-88772, to gain unauthenticated root-level access…

1 week ago

GitHub AI Agent Uncovers 24 Android App Vulnerabilities

GitHub Security Lab has disclosed 24 vulnerabilities in Android applications discovered through its open-source AI security agent and specialized audit…

1 week ago

ViewSonic vCast Vulnerabilities Let Attackers Gain Full Device Control Without Authentication

The CERT Coordination Center (CERT/CC) has revealed a chain of three vulnerabilities in ViewSonic’s vCast software that could enable unauthenticated…

1 week ago

Citrix Confirms NetScaler Zero-Day RCE Flaws Actively Exploited in Attacks

Citrix has released emergency security updates for NetScaler ADC and NetScaler Gateway after confirming active exploitation of two critical zero-day…

2 weeks ago

Apache Tomcat 11.0.26 Fixes 12 Security Flaws Enabling WebSocket Bypass and DoS Attacks

Apache Tomcat 11.0.26 has been released with fixes for 12 security vulnerabilities, including a significant flaw that could allow attackers…

2 weeks ago

HPE Networking Analytics Engine Flaws Let Attackers Gain Root Access

Hewlett Packard Enterprise (HPE) has announced security updates for its Networking Analytics and Location Engine (ALE), addressing 10 vulnerabilities that…

2 weeks ago

NVIDIA Infrastructure Controller Hit by 14 Flaws Enabling Code Execution and Privilege Escalation

NVIDIA has released version 2.0 of its Infrastructure Controller to address 14 vulnerabilities found in its Linux-based infrastructure management software.…

2 weeks ago

Google Chrome 153 Update Fixes 16 Security Flaws, Including Two Critical Vulnerabilities

Google has released Chrome version 153 to the Stable desktop channel, addressing 16 security vulnerabilities, including two critical-severity flaws affecting…

3 weeks ago

Hackers Exploit MikroTik Vulnerabilities to Take Over MikroTik Routers Without Authentication

Attackers are actively exploiting a critical vulnerability chain dubbed MikroTrick to seize full administrative control of internet-exposed MikroTik RouterOS devices…

3 weeks ago