Bug Bounty

SOC Advisory – Apple AirPlay Zero-Click RCE Vulnerability (AirBorne)

Local info‑disclosure flaw exposes sensitive data on Galaxy Watch

Lenovo PC Manager & Accessories Tools Local Privilege Escalation

DSA-2025-021: Security Update for Dell Client Platform BIOS for a Weak Authentication Vulnerability

Fuji Electric Smart Editor is vulnerable to an out-of-bounds write, which may allow an attacker to execute arbitrary cod

Hard-Coded 'b' Password in Sitecore XP Sparks Major RCE Risk in Enterprise Deployments

TP-Link Router Flaw CVE-2023-33538 Under Active Exploit, CISA Issues Immediate Alert

IBM Backup Services Vulnerability Let Attackers Escalate Privileges

CISA Warns of iOS 0-Click Vulnerability Exploited in the Wild

ASUS Armoury Crate Vulnerability Lets Hackers Gain System-Level Access on Windows

Hackers Actively Exploiting Google Chrome Zero-Day Vulnerability in Active Attacks

Hackers Actively Exploit Zyxel RCE Vulnerability Through UDP Port

New Veeam RCE flaw lets domain users hack backup servers

20+ Malicious Apps on Google Play Compromise User Login Details

XDSpy Threat Actors Exploit Windows LNK Zero-Day Vulnerability to Target Windows System Users

SinoTrack GPS Devices Vulnerable to Remote Vehicle Control via Default Passwords

Zero-Click AI Vulnerability Exposes Microsoft 365 Copilot Data Without User Interaction

Apple Zero-Click Flaw in Messages Exploited to Spy on Journalists Using Paragon Spyware

Multiple GitLab Vulnerabilities Expose Users to Complete Account Takeover Risks

Acer Control Center Flaw Lets Attackers Run Malicious Code as Elevated User

Windows Task Scheduler Vulnerability Allows Attackers to Gain Elevated Privileges

CVE-2025-4231 PAN-OS: Authenticated Admin Command Injection Vulnerability in the Management Web Interface

SECURITY BULLETIN: June 2025 for Trend Micro Apex One

Zero-Day Vulnerability in Windows SMB Client Exploited via Reflective Kerberos Relay Attack

Windows Disk Cleanup Tool Vulnerability: PoC Exploit Now Public