The vendor has issued a patch to close four holes in its flagship Backup & Replication suite; version 13 users are advised to ...

CISA warns that hackers are actively exploiting a high-severity flaw in Gogs that can lead to remote code execution; no patch ...

The RondoDox botnet has been observed exploiting the critical React2Shell flaw (CVE-2025-55182) to infect vulnerable Next.js servers with malware and cryptominers.

An unauthenticated user can execute the attack, and there’s no mitigation, just a hotfix that should be applied immediately. A maximum severity remote code execution vulnerability in Hewlett Packard ...

Open WebUI, an open-source, self-hosted web interface for interacting with local or remote AI language models, carried a high ...

Microsoft’s January 2026 Patch Tuesday fixes 114 Windows flaws, including an actively exploited Desktop Window Manager bug ...

Chrome 144 and Firefox 147 were released with patches for a total of 26 vulnerabilities, including high-severity code ...

Researchers discovered remote code execution vulnerabilities in three AI libraries from Apple, Salesforce and Nvidia used by ...

The US Cybersecurity and Infrastructure Security Agency (CISA) has added a new bug to its Known Exploited Vulnerabilities ...

The vulnerability was fixed in n8n version 1.111.0, with the addition of a task-runner-based native Python implementation ...

December 2025, the RondoDox botnet operators have been targeting Next.js servers impacted by the React2Shell vulnerability.

The popular tool for creating no-code workflows has four critical vulnerabilities, one with the highest score. Admins should ...