The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report On June 25, 2025, Cloud Software Group published a security bulletin for CVE-2025-6543, a new ...
The Modern Events Calendar Lite WordPress plugin before 7.36.4 does not verify that a user is authorized to edit the target post before updating it, allowing authenticated users with the Subscriber ...
The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report CVE-2026-83548 is a critical pre-authentication server-side request forgery (SSRF) vulnerability in the ...
The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report On September 11, 2026, CVE-2026-85706 was added to the U.S. Cybersecurity and Infrastructure Security ...
The Salon Booking System WordPress plugin before 10.31.11 does not restrict which user account its salon staff roles may edit through the customers management screen, allowing users with the Salon ...
This module exploits a backdoor in Webmin versions 1.890 through 1.920. Only the SourceForge downloads were backdoored, but they are listed as official downloads on the project's site. Unknown ...
In keeping with standard industry practices around Coordinated Vulnerability Disclosure (CVD) (such as CERT/CC's, Google's, ZDI's), as well as the standards promulgated in ISO 29147 and ISO 30111, ...
The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report Patch management is the process of distributing and applying updates to software. These patches are often ...
The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report On September 22, 2026, F5 published a security advisory for CVE-2026-94127, a critical heap-based buffer ...
A vulnerability was identified in D-Link DIR-825 3.00b32. Affected is the function tunnel_set_params of the file tunnel.c of the component rp-l2tp. The manipulation of the argument peer_hostname leads ...
Improper restriction of XML external entity reference vulnerability in Cosminexus Component Container. This issue affects Cosminexus Component Container: from 11-70-01 before 11-70-03, from 11-60 ...