Technology ❯ Cybersecurity ❯ Vulnerabilities

CVE

Remote Code Execution CVE-2023-39780 CVE-2025-31277 CVE-2026-63077 Zero-Day Exploits WatchGuard Firebox CVE-2026-8732 Patch Tuesday CVE-2025-48572 CVE-2026-25680

3 ARTICLES

2w ago

Broadcom Patches Two VM‑Escape Flaws in VMware Workstation and Fusion

The fixes close an integer‑overflow in the VMXNET3 virtual NIC and an HGFS stack overflow that allowed a VM administrator to execute code on the host.

6 ARTICLES

3w ago

SonicWall: Two SMA1000 Zero‑Days Actively Exploited

3 ARTICLES

4w ago

Factory Implants in Chinese-Made Routers Give Remote Root Access

6 ARTICLES

4w ago

Active Exploitation of Zimbra Vulnerability CVE-2026-73570 Prompts Emergency Patching

4 ARTICLES

last mo.

Critical WordPress Plugin Flaws Leave Hundreds of Thousands of Sites at Risk

3 ARTICLES

last mo.

Evooo1Bot Identified as Mirai-Derived Botnet That Turns Edge Devices Into SOCKS5 Proxies

7 ARTICLES

last mo.

CISA Adds Four High‑Risk RCE Flaws to KEV and Orders Immediate Federal Patching

4 ARTICLES

last mo.

Dysphoria Botnet Uses Blockchain Domains and Infected Devices to Hide Command Servers

4 ARTICLES

last mo.

AryStinger Malware Hijacks 4,300+ Legacy Routers to Build Reconnaissance and Proxy Fleet

4 ARTICLES

3mo ago

Critical WP Maps Pro Flaw Lets Attackers Create WordPress Admin Accounts

4 ARTICLES

4mo ago

Critical 'NGINX Rift' Bug in Rewrite Module Exposes Servers to Remote Code Execution

6 ARTICLES

5mo ago

CISA Adds Eight Exploited Vulnerabilities to KEV and Sets Rapid Federal Patch Deadlines

6 ARTICLES

5mo ago

NIST Limits NVD CVE Enrichment to KEV, Federal Use and Critical Software

23 ARTICLES

5mo ago

Microsoft’s April Patch Tuesday Fixes Exploited SharePoint Zero-Day and 160-Plus Flaws

6 ARTICLES

7mo ago

SolarWinds Releases Serv-U 15.5.4 to Fix Four Critical Remote Code Execution Flaws

6 ARTICLES

7mo ago

Active Attacks Hit SolarWinds Web Help Desk, Abusing Zoho ManageEngine and Velociraptor

4 ARTICLES

7mo ago

OpenSSL Patches 12 Flaws Found by AISLE in Coordinated January Update

CVE

Broadcom Patches Two VM‑Escape Flaws in VMware Workstation and Fusion

SonicWall: Two SMA1000 Zero‑Days Actively Exploited

Factory Implants in Chinese-Made Routers Give Remote Root Access

Active Exploitation of Zimbra Vulnerability CVE-2026-73570 Prompts Emergency Patching

Critical WordPress Plugin Flaws Leave Hundreds of Thousands of Sites at Risk

Evooo1Bot Identified as Mirai-Derived Botnet That Turns Edge Devices Into SOCKS5 Proxies

CISA Adds Four High‑Risk RCE Flaws to KEV and Orders Immediate Federal Patching

Dysphoria Botnet Uses Blockchain Domains and Infected Devices to Hide Command Servers

Critical Unauthenticated RCE Found in TeamCity On‑Premises

Public Exploits Target WordPress wp2shell Pre‑Auth RCE After Emergency Patch

Never miss stories about

CVE

Citrix Patches Six NetScaler Flaws Including High-Severity SAML Memory Bug

AryStinger Malware Hijacks 4,300+ Legacy Routers to Build Reconnaissance and Proxy Fleet

Critical WP Maps Pro Flaw Lets Attackers Create WordPress Admin Accounts

Critical 'NGINX Rift' Bug in Rewrite Module Exposes Servers to Remote Code Execution

CISA Adds Eight Exploited Vulnerabilities to KEV and Sets Rapid Federal Patch Deadlines

NIST Limits NVD CVE Enrichment to KEV, Federal Use and Critical Software

Microsoft’s April Patch Tuesday Fixes Exploited SharePoint Zero-Day and 160-Plus Flaws

SolarWinds Releases Serv-U 15.5.4 to Fix Four Critical Remote Code Execution Flaws

Active Attacks Hit SolarWinds Web Help Desk, Abusing Zoho ManageEngine and Velociraptor

OpenSSL Patches 12 Flaws Found by AISLE in Coordinated January Update

Never miss stories about

CVE