Overview SharePoint attackers exploit authentication bypass before triggering remote code execution on vulnerable servers.CVE ...

A critical vulnerability chain in the popular Avada theme for WordPress can be exploited by an unauthenticated attacker to ...

Attackers are now targeting a chain of two Microsoft SharePoint vulnerabilities that can allow them to execute arbitrary code ...

Attackers exploit CVE-2026-73570 on Zimbra servers with zimbra-snmp installed and SNMP notifications enabled, allowing ...

A vulnerability in UNISOC modem firmware can allow arbitrary code execution with kernel privileges from the modem context, ...

Windows Server 2025 is currently open to a Remote Code Execution exploit via the Windows Update Service, and at the time of this writing a fix from Microsoft has yet to fully patch the issue. Reports ...

A 100% deterministic Windows kernel exploit is now public. Browser-based AI agents run in the same sandbox the exploit ...

The risk of attackers exploiting a recently disclosed maximum severity vulnerability in Cisco's IOS XE Wireless Controller software has increased significantly following the public release of detailed ...

Cyber threat actors have been exploiting a vulnerability in Gladinet’s Triofox, a file-sharing and remote access platform, and chained it with the abuse of the built-in anti-virus feature to achieve ...

SAP has patched a CVSS 10.0 vulnerability in Commerce Cloud that could allow an unauthenticated attacker to execute arbitrary code. The flaw, tracked as CVE-2026-58231, affects the Data Hub Adapter ...