Vulnerability

WinZip Vulnerability Allows Remote Attackers to Execute Arbitrary CodeWinZip Vulnerability Allows Remote Attackers to Execute Arbitrary Code

WinZip Vulnerability Allows Remote Attackers to Execute Arbitrary Code

A newly discovered vulnerability in WinZip, a popular file compression and archiving utility, has raised alarms among cybersecurity experts. Identified…

3 months ago
30,000 WordPress Sites Exposed to Exploitation via File Upload Vulnerability30,000 WordPress Sites Exposed to Exploitation via File Upload Vulnerability

30,000 WordPress Sites Exposed to Exploitation via File Upload Vulnerability

A critical security vulnerability in the "Security & Malware scan by CleanTalk" plugin has left over 30,000 WordPress websites exposed…

3 months ago
Amazon Machine Image Vulnerability Allows Hackers to Publish Fake ResourcesAmazon Machine Image Vulnerability Allows Hackers to Publish Fake Resources

Amazon Machine Image Vulnerability Allows Hackers to Publish Fake Resources

 A new security vulnerability targeting Amazon Machine Images (AMIs) has emerged, exposing organizations and users to potential exploitation. Dubbed the…

3 months ago
Palo Alto PAN-OS Zero-Day Flaw Allows Attackers to Bypass Web Interface AuthenticationPalo Alto PAN-OS Zero-Day Flaw Allows Attackers to Bypass Web Interface Authentication

Palo Alto PAN-OS Zero-Day Flaw Allows Attackers to Bypass Web Interface Authentication

Palo Alto Networks has disclosed a zero-day vulnerability in its PAN-OS software (CVE-2025-0108), allowing attackers to bypass authentication on the…

3 months ago
Windows Driver Zero-Day Vulnerability Let Hackers Remotely Gain System AccessWindows Driver Zero-Day Vulnerability Let Hackers Remotely Gain System Access

Windows Driver Zero-Day Vulnerability Let Hackers Remotely Gain System Access

Microsoft has confirmed the discovery of a significant zero-day vulnerability, tracked as CVE-2025-21418, in the Windows Ancillary Function Driver for WinSock.…

3 months ago
0-Day Vulnerability in Windows Storage Allow Hackers to Delete the Target Files Remotely0-Day Vulnerability in Windows Storage Allow Hackers to Delete the Target Files Remotely

0-Day Vulnerability in Windows Storage Allow Hackers to Delete the Target Files Remotely

A newly discovered 0-day vulnerability in Windows Storage has sent shockwaves through the cybersecurity community. Identified as CVE-2025-21391, this critical flaw…

3 months ago
Critical Ivanti CSA Vulnerability Allows Attackers Remote Code Execution to Gain Restricted AccessCritical Ivanti CSA Vulnerability Allows Attackers Remote Code Execution to Gain Restricted Access

Critical Ivanti CSA Vulnerability Allows Attackers Remote Code Execution to Gain Restricted Access

A critical vulnerability has been discovered in the Ivanti Cloud Services Application (CSA), potentially allowing attackers to execute remote code…

3 months ago
Critical OpenSSL Vulnerability Let Attackers Launch Man-in-the-Middle AttacksCritical OpenSSL Vulnerability Let Attackers Launch Man-in-the-Middle Attacks

Critical OpenSSL Vulnerability Let Attackers Launch Man-in-the-Middle Attacks

A high-severity security vulnerability (CVE-2024-12797) has been identified in OpenSSL, one of the most widely used cryptographic libraries. The flaw…

3 months ago
Fortinet FortiOS & FortiProxy Zero-Day Exploited to Hijack Firewall & Gain Super Admin AccessFortinet FortiOS & FortiProxy Zero-Day Exploited to Hijack Firewall & Gain Super Admin Access

Fortinet FortiOS & FortiProxy Zero-Day Exploited to Hijack Firewall & Gain Super Admin Access

Cybersecurity firm Fortinet has issued an urgent warning regarding a newly discovered zero-day authentication bypass vulnerability (CVE-2025-24472) affecting its FortiOS…

3 months ago
Critical Flaw in Progress LoadMaster Allows Attackers to Execute System CommandsCritical Flaw in Progress LoadMaster Allows Attackers to Execute System Commands

Critical Flaw in Progress LoadMaster Allows Attackers to Execute System Commands

 A series of critical security vulnerabilities have been identified in Progress Software's LoadMaster application, potentially allowing remote attackers to execute…

3 months ago