Trend Micro’s Zero Day Initiative (ZDI) has published 13 advisories describing unpatched vulnerabilities in Ivanti Endpoint ...

Cybersecurity company Imperva, which discovered and reported the problem in July 2025, described CVE-2025-53967 as a "design ...

No evidence of exploitation … yet A 13-year-old critical flaw in Redis servers, rated a perfect 10 out of 10 in severity, can ...

Now, security researchers found that figma-developer-mpc is vulnerable to a command injection flaw that allows threat actors to insert special characters into the input and trick the system into ...

Huntress reports active exploitation of Gladinet CVE-2025-11371, exposing system files and enabling remote code execution.

Overview Recently, NSFOCUS CERT detected that Oracle issued a security bulletin to fix the remote code execution vulnerability (CVE-2025-61882) in Oracle E-Business Suite; Because Oracle Concurrent ...

The Redis security team has issued a warning to system administrators and cloud infrastructure providers after discovering a ...

Threat actors are exploiting a zero-day vulnerability (CVE-2025-11371) in Gladinet CentreStack and Triofox products, which ...

Oracle zero-day vulnerabilities are being targeted by at least one major cybercrime group and the FBI says it's looking bad.

Overview Recently, NSFOCUS CERT detected that Redis issued a security bulletin and fixed the Redis Lua code execution vulnerability (CVE-2025-49844); Because Redis’s Lua script engine has a ...

Apple announced significant updates to its bug bounty program and the company is now offering up to $2 million for complex ...

There are a huge number of products available in the modern world that come with network connectivity now, when perhaps they might be better off with out it. Kitchen appliances like refrigerators are ...