Discover the critical Local File Inclusion vulnerability in White Star Software Protop 4.4.2-2024-11-27. Learn about potential risks and mitigation strategies.
TL;DR SugarCRM 14.0.0 has been identified with severe vulnerabilities including Server-Side Request Forgery (SSRF) and Code Injection. These issues can lead to unauthorized access and potential dat...
Discover the critical Remote Code Execution (RCE) vulnerability in PivotX 3.0.0 RC3. Learn how it impacts security and why immediate action is necessary. Get insights into prevention measures and t...
TL;DR Langflow 1.2.x contains a critical remote code execution (RCE) vulnerability. Users are advised to update immediately to mitigate risks. Critical Vulnerability Identified in Langflow 1.2.x:...
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a significant Wing FTP Server flaw to its Known Exploited Vulnerabilities catalog. This vulnerability, CVE-2025-47812, all...
TL;DR A former U.S. Army soldier has pleaded guilty to hacking and extorting at least ten major technology and telecommunications companies. The soldier, aged 21, exploited vulnerabilities to extra...
Google has released an urgent Chrome update to address a critical vulnerability, CVE-2025-6558, actively exploited in the wild. Learn more about the security issues and how to protect your browser.
Discover how the UNC6148 threat group targets fully-patched SonicWall SMA 100 series devices with the OVERSTEP rootkit. Learn about the campaign, its implications, and how to stay protected.
TL;DR Ukrainian hackers have claimed responsibility for a significant cyber attack on Russia’s Gaskar Integration plant, a major supplier of drones to the Russian army. The attack reportedly destro...
Explore the ongoing cyber attack on Air Serbia, its impact on operations, and the significance of this security breach in the aviation industry.