Vulnerability

Cisco Nexus Vulnerability Allows Attackers to Inject Malicious CommandsCisco Nexus Vulnerability Allows Attackers to Inject Malicious Commands

Cisco Nexus Vulnerability Allows Attackers to Inject Malicious Commands

Cisco Systems has issued a critical security advisory for a newly disclosed command injection vulnerability affecting its Nexus 3000 and…

3 months ago
GitLab Vulnerabilities Allow Attackers to Bypass Security and Run Arbitrary ScriptsGitLab Vulnerabilities Allow Attackers to Bypass Security and Run Arbitrary Scripts

GitLab Vulnerabilities Allow Attackers to Bypass Security and Run Arbitrary Scripts

GitLab has urgently released security updates to address multiple high-severity vulnerabilities in its platform that could allow attackers to bypass…

3 months ago
LibreOffice Flaws Allow Attackers to Run Malicious Files on WindowsLibreOffice Flaws Allow Attackers to Run Malicious Files on Windows

LibreOffice Flaws Allow Attackers to Run Malicious Files on Windows

A high-severity security vulnerability (CVE-2025-0514) in LibreOffice, the widely used open-source office suite, has been patched after researchers discovered it…

3 months ago
Cisco Nexus Switch Vulnerability Allows Attackers to Cause DoSCisco Nexus Switch Vulnerability Allows Attackers to Cause DoS

Cisco Nexus Switch Vulnerability Allows Attackers to Cause DoS

Cisco Systems has disclosed a high-severity vulnerability (CVE-2025-20111) in its Nexus 3000 and 9000 Series Switches operating in standalone NX-OS…

3 months ago
RSync Vulnerabilities Allow Hackers to Take Full Control of Servers – PoC ReleasedRSync Vulnerabilities Allow Hackers to Take Full Control of Servers – PoC Released

RSync Vulnerabilities Allow Hackers to Take Full Control of Servers – PoC Released

A series of critical security vulnerabilities in the widely-used Rsync file synchronization tool have been uncovered, exposing millions of servers…

3 months ago
Millions of WordPress Websites Vulnerable to Script Injection Due to Plugin FlawMillions of WordPress Websites Vulnerable to Script Injection Due to Plugin Flaw

Millions of WordPress Websites Vulnerable to Script Injection Due to Plugin Flaw

A critical security vulnerability in the Essential Addons for Elementor plugin, installed on over 2 million WordPress websites, has exposed sites to…

3 months ago
LightSpy Malware Expands With 100+ Commands to Target Users Across All Major OS PlatformsLightSpy Malware Expands With 100+ Commands to Target Users Across All Major OS Platforms

LightSpy Malware Expands With 100+ Commands to Target Users Across All Major OS Platforms

The LightSpy surveillance framework has significantly evolved its operational capabilities, now supporting over 100 commands to infiltrate Android, iOS, Windows,…

3 months ago
Critical RCE Vulnerability in MITRE Caldera – Proof of Concept ReleasedCritical RCE Vulnerability in MITRE Caldera – Proof of Concept Released

Critical RCE Vulnerability in MITRE Caldera – Proof of Concept Released

A critical remote code execution (RCE) vulnerability has been uncovered in MITRE Caldera, a widely used adversarial emulation framework. The…

3 months ago
CISA Alerts: Oracle Agile Vulnerability Actively ExploitedCISA Alerts: Oracle Agile Vulnerability Actively Exploited

CISA Alerts: Oracle Agile Vulnerability Actively Exploited

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent alert regarding active exploitation of a severe deserialization…

3 months ago
Smart Bed Security Flaw Lets Hackers Access Other Network DevicesSmart Bed Security Flaw Lets Hackers Access Other Network Devices

Smart Bed Security Flaw Lets Hackers Access Other Network Devices

A security researcher has uncovered critical vulnerabilities in Eight Sleep’s internet-connected smart beds, revealing exposed Amazon Web Services (AWS) credentials,…

3 months ago