Bug Bounty

Critical Weakness In OpenPGP.js Enables Forged Signature Authentication

Graphite Spyware Uses iOS Zero-Click Vulnerability to Target Journalists

Amazon Cloud Cam Vulnerability Exposed Users to Network Traffic Interception

CVE-2025-26685 – Spoofing to Elevate Privileges with Microsoft Defender for Identity

Spring Framework Flaw Enables Remote File Disclosure via “Content‑Disposition” Header

Critical Android Security Update Addresses Privilege Escalation Vulnerabilities

New Mirai Botnet Variant Exploits TBK DVR Vulnerability to Deploy Malicious Code

IoT SecurityNissan Leaf Hacked for Remote Spying, Physical Takeover

Risk ManagementCode Execution Flaws Haunt Adobe Acrobat Reader, Adobe Commerce

Microsoft Windows WebDAV 0-Day RCE Vulnerability Actively Exploited in The Wild

Google Vulnerability Allowed Hackers to Access User Phone Numbers

Critical SOQL Injection 0-Day Vulnerability in Salesforce Affects Millions Worldwide

CISA Issues Alert on Erlang/OTP SSH Server RCE Vulnerability Under Active Exploitation

Two Botnets, One Flaw: Mirai Spreads Through Wazuh Vulnerability

Vulnerability in DanaBot Malware C2 Server Leaks Threat Actor Usernames and Crypto Keys

Severe SAP NetWeaver Vulnerability Allows Attackers to Bypass Authorization Checks

ISPConfig Vulnerability Allows Privilege Escalation to Superadmin and PHP Code Injection Exploit

Ivanti Workspace Control Vulnerability Lets Attackers Remotely Exploit To Steal the Credential

IBM QRadar Vulnerabilities Expose Sensitive Configuration Files to Attackers cyb

Critical RCE Vulnerability in AWS Amplify Studio – PoC Now Public

Critical Stack-Based Buffer Overflow in Tenda AC9 Router via HTTP POST Request

CVE-2025-3460: ON Semiconductor Quantenna set_tx_pow Argument Injection

Wireshark Vulnerability Allows Hackers to Launch DoS Attacks Through Packet Injection

Popular Chrome Extensions Leak API Keys, User Data via HTTP and Hard-Coded Credentials

Dell PowerScale Vulnerability Let Attackers Gain Unauthorized Filesystem Access