CVE/vulnerability
Critical WordPress Bricksforge Flaw Lets Unauthenticated Attackers Execute Remote Code
Attackers are actively targeting a critical vulnerability in the Bricksforge WordPress plugin. This flaw allows unauthenticated users to upload malicious files and execute arbitrary...
CVE/vulnerability
CISA Adds Actively Exploited Apache Struts Command Injection Flaw to KEV Catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added CVE-2016-3081, a critical command injection vulnerability in Apache Struts, to its Known Exploited Vulnerabilities...
CVE/vulnerability
AnyDesk Vulnerability Allowing Remote Code Execution With Root Privileges
Security researcher has disclosed a heap buffer overflow vulnerability in AnyDesk Linux version 8.0.2, named AnyPwn.
This vulnerability allows remote command execution before the...
CVE/vulnerability
React Server Components Vulnerability Lets Attackers Freeze Next.js Servers With a Single Request
A security vulnerability has been identified in React Server Components deployments using specific vulnerable releases of React 19.
An attacker can exploit this flaw...
CVE/vulnerability
Hackers Target Hikvision Cameras in Ukraine With RCE Exploits Amid Russian Airstrikes
Hackers targeted Hikvision surveillance devices in Ukraine during a concentrated surge of remote command execution attempts that coincided with Russian missile and drone strikes....
CVE/vulnerability
Critical Citrix NetScaler Vulnerability Allows Remote Code Execution Attacks – CVSS 9.5
Citrix has disclosed a critical memory overflow vulnerability in NetScaler ADC and NetScaler Gateway that could enable remote code execution or denial of service...
CVE/vulnerability
Critical Sungrow Authentication Bypass Flaw Lets Hackers Take Control of Solar Power Plants
A critical authentication bypass vulnerability in Sungrow’s iSolarCloud management platform allowed researchers to access user and administrator accounts without valid passwords.
This flaw potentially...
CVE/vulnerability
PoC Exploit Released for Zammad Vulnerability Enabling Session Hijacking and Remote Code Execution
A proof-of-concept (PoC) exploit has been released for CVE-2026-102489, a critical vulnerability in Zammad that can expose active users' session cookies and enable remote...