A critical vulnerability chain in the popular Avada theme for WordPress can be exploited by an unauthenticated attacker to ...

Attackers are now targeting a chain of two Microsoft SharePoint vulnerabilities that can allow them to execute arbitrary code ...

Hackers are exploiting CVE-2026–59310, a critical vulnerability in VMware vCenter that leads to arbitrary code execution.

WordPress has patched CVE-2026-65640, a high-severity vulnerability that allows authenticated attackers to execute arbitrary code.

IOS update 26.6 1: Apple has released iOS 26.6.1 and iPadOS 26.6.1 with security fixes addressing vulnerabilities across ...

A vulnerability in UNISOC modem firmware can allow arbitrary code execution with kernel privileges from the modem context, ...

A flaw in Cursor’s AI agent lets malicious repositories trigger arbitrary code execution through routine Git operations, now patched in version 2.5. Security researchers have disclosed a high-severity ...

Thirteen critical vulnerabilities have been found in the vm2 JavaScript sandbox package that could allow an attacker’s code to escape the container and do nasty things to IT environments. As a result, ...

Google has released a Chrome desktop update fixing 15 security vulnerabilities, including 2 buffer overflow flaws rated ...