A vulnerability in Apache HTTP Server’s HTTP/2 protocol handling now has working exploit code circulating among security ...

Ivanti has released an emergency patch for a zero-day vulnerability in its Endpoint Manager Mobile (EPMM) platform after ...

CVE-2026-44009 (CVSS score: 9.8) - A vulnerability that allows sandbox escape via a null proto exception and permits an ...

"A buffer overflow vulnerability in the User-ID Authentication Portal (aka Captive Portal) service of Palo Alto Networks ...

Thirteen critical vulnerabilities have been found in the vm2 JavaScript sandbox package that could allow an attacker’s code ...

Google announced on Monday the release of an Android update patching a critical vulnerability that can be exploited for ...

GitHub employees fixed a critical remote code execution vulnerability in less than six hours last month. Wiz Research used AI ...

A critical vulnerability in the popular Node.js sandboxing library vm2 allows escaping the sandbox and executing arbitrary ...

Microsoft has released its August 2025 Patch package, a cumulative set of updates addressing more than 100 vulnerabilities across a host of its products. Microsoft’s SharePoint Server Remote Code ...

Remote code execution vulnerabilities pose especially critical threats to organizations, and VMware’s stronghold in data centers worldwide give patching these flaws particular urgency. VMware fixed ...

Google has confirmed that a critical Android vulnerability, CVE-2026-0073, could enable remote code execution without any ...

Attackers could inject prompts into a GitHub issue and take over the AI agent designed to automatically triage the issue.