Vulnerability

React Server Components Vulnerability Lets Attackers Freeze Next.js Servers With a Single Request

A security vulnerability has been identified in React Server Components deployments using specific vulnerable releases of React 19. An attacker…

4 weeks ago

Hackers Target Hikvision Cameras in Ukraine With RCE Exploits Amid Russian Airstrikes

Hackers targeted Hikvision surveillance devices in Ukraine during a concentrated surge of remote command execution attempts that coincided with Russian…

4 weeks ago

Critical Citrix NetScaler Vulnerability Allows Remote Code Execution Attacks – CVSS 9.5

Citrix has disclosed a critical memory overflow vulnerability in NetScaler ADC and NetScaler Gateway that could enable remote code execution…

4 weeks ago

Critical Sungrow Authentication Bypass Flaw Lets Hackers Take Control of Solar Power Plants

A critical authentication bypass vulnerability in Sungrow’s iSolarCloud management platform allowed researchers to access user and administrator accounts without valid…

4 weeks ago

PoC Exploit Released for Zammad Vulnerability Enabling Session Hijacking and Remote Code Execution

A proof-of-concept (PoC) exploit has been released for CVE-2026-102489, a critical vulnerability in Zammad that can expose active users' session…

4 weeks ago

Critical LMCache RCE Vulnerability Remains Unpatched, Public PoC Exploit Available

A critical vulnerability in LMCache allows unauthenticated attackers to execute arbitrary code against reachable multi-process deployments by exploiting unsafe Python…

4 weeks ago

PoC Exploit Released for Critical VMware Vulnerability Enabling Guest-to-Host Attacks

A public proof-of-concept (PoC) exploit has been released for CVE-2026-59346, a critical integer overflow flaw in VMware Workstation and Fusion…

4 weeks ago

Critical Progress DataDirect GenAI Flaw Lets Attackers Execute Arbitrary OS Commands

Progress has disclosed a critical command injection vulnerability in the Early Access Release of its DataDirect Autonomous REST Connector AI…

4 weeks ago

Critical Veeam Backup & Replication Flaw Allows Low-Privileged Users to Execute Remote Code

Veeam released security updates to address a critical vulnerability that lets low-privileged users execute remote code on Veeam Backup Servers.…

4 weeks ago

Critical libheif Vulnerability Could Enable Remote Code Execution Through WordPress Image Uploads

A critical heap-buffer-overflow vulnerability in libheif could allow authenticated WordPress users to achieve remote code execution by uploading a specially…

1 month ago