Critical FOSSBilling SSTI (CVE-2026-28496) Allows Full RCE
Security researchers have sounded the alarm over a critical...
CISA Adds Cisco Unified CM SSRF CVE-2026-20230 to KEV List
The U.S. Cybersecurity and Infrastructure Security Agency...
Chrome 149 Security Patch: Use-After-Free Bugs in WebGL, Autofill, and Blink Fixed
Google has pushed a significant security update to...
Cisco Unified CM SSRF Flaw Lets Attackers Gain Root Access
Cisco has disclosed a critical Server-Side Request Forgery...
Critical Webmin Stored XSS Vulnerability Lets Untrusted Users Compromise Root-Level Access
A critical stored cross-site scripting (XSS) vulnerability...
PoC Exploit Released for Microsoft Exchange SSRF Vulnerability — Patch Now
A proof-of-concept (PoC) exploit has been publicly released...
Critical DifyTap Flaws Let Attackers Silently Wiretap AI Conversations on Dify’s 1M-App Platform
Four newly identified vulnerabilities in Dify, the...
Apple Fixes High-Severity Beats Bluetooth Eavesdropping Flaw
Apple has released Beats Firmware Update 1B211 to address a...
Critical QNAP NAS Flaws Let Attackers Execute Commands
QNAP has released security advisory QSA-26-10,...
Gravity SMTP Flaw Under Active Exploitation Across WordPress Sites
Security researchers are warning WordPress administrators...