Critical n8n flaw CVE-2025-68668 allows authenticated users to run system commands via workflows; affects versions 1.0.0 to ...

A critical MongoDB flaw, CVE-2025-14847, is under active exploitation, allowing unauthenticated data leaks from 87,000+ ...

Microsoft has pushed back against claims that multiple prompt injection and sandbox-related issues raised by a security ...

In the SSD management software Samsung Magician, attackers can exploit a vulnerability to escalate their privileges.

In the UniFi Protect Application, attackers can exploit vulnerabilities for unauthorized access to cameras and DoS attacks.

The flaw is tracked as CVE-2025-54957 and its existence came to light in October 2025 after it was discovered by Google ...

Hackers are exploiting CVE-2025-14847, aka MongoBleed, a MongoDB vulnerability, to leak sensitive information from server ...

A critical LangChain AI vulnerability exposes millions of apps to theft and code injection, prompting urgent patching and ...

IBM urged customers to patch a critical authentication bypass vulnerability in its API Connect enterprise platform that could ...

The vulnerability, tracked as CVE-2025-68664 and dubbed “LangGrinch,” has a Common Vulnerability Scoring System score of 9.3.

Business-grade email server software SmarterMail just patched a maximum-severity vulnerability that allowed threat actors to ...

The source of the account reset appears to be a site vulnerability that allows a third party to wipe accounts and change ...