The vendor has issued a patch to close four holes in its flagship Backup & Replication suite; version 13 users are advised to ...

Open WebUI carried CVE-2025-64496, a high-severity code injection flaw in Direct Connection features Exploitation could ...

An unauthenticated user can execute the attack, and there’s no mitigation, just a hotfix that should be applied immediately. A maximum severity remote code execution vulnerability in Hewlett Packard ...

The vulnerability was fixed in n8n version 1.111.0, with the addition of a task-runner-based native Python implementation ...

December 2025, the RondoDox botnet operators have been targeting Next.js servers impacted by the React2Shell vulnerability.

Business-grade email server software SmarterMail just patched a maximum-severity vulnerability that allowed threat actors to ...

The popular tool for creating no-code workflows has four critical vulnerabilities, one with the highest score. Admins should ...

Discovered during fuzz testing, the bug affects Broadcom chipset software and requires a manual router reboot after each ...

The bugs could allow an attacker to take over an affected system for their own purposes, or to crash the software, causing a ...

A newly uncovered Chinese threat group known as DarkSpectre has been linked to one of the most widespread browser extension ...