Hackers are actively exploiting a critical remote code execution (RCE) vulnerability in the Everest Forms Pro WordPress...
vulnerability
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a newly identified Android Framework vulnerability, tracked...
A new class of indirect prompt injection (IPI) attacks targets Google Gemini’s voice assistant, allowing attackers to...
Laravel CRLF Injection Vulnerability Enables an Attacker to Interfere with Outbound Email Processing
Laravel CRLF Injection Vulnerability Enables an Attacker to Interfere with Outbound Email Processing
A high-severity CRLF injection vulnerability in the Laravel framework, tracked as CVE-2026-48019, could allow attackers to interfere...
A newly disclosed flaw in the Windows search URI handler can silently leak NTLMv2 hashes to attacker-controlled servers with...
A newly disclosed remote denial-of-service exploit dubbed “HTTP/2 Bomb” targets the default HTTP/2 configurations of the world’s...
A critical security vulnerability in Visual Studio Code’s webview implementation allows attackers to steal GitHub OAuth tokens,...
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical Palo Alto Networks PAN-OS vulnerability...
A dependency confusion vulnerability affecting Microsoft’s Azure Portal after the Microsoft Security Response Center (MSRC) closed the...
.webp)
A critical supply chain vulnerability in Claude Code’s GitHub Actions that could allow attackers to compromise any...