#allows


Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes

Oct 2, 2026 // 11:52

The U.S. Cybersecurity and Infrastructure Security Agency (CISA), on Thursday, added a critical security flaw impacting Fortinet FortiMail to its Known Exploited Vulnerabilities (KEV) catalog, […]

Microsoft Entra ID Flaw (CVSS 10.0) Exploited in Wild, Allows Remote Code Execution

Aug 21, 2026 // 10:48

Microsoft on Thursday warned of a maximum-severity security flaw in Entra ID that it said has been exploited in the wild, but noted that no […]

New Januscape Linux flaw allows VM escape on Intel, AMD devices

Jul 7, 2026 // 15:17

A 16-year-old Linux kernel vulnerability, dubbed Januscape, allows attackers to escape a virtual machine and execute arbitrary code on the host. According to Hyunwoo Kim, […]

Ivanti: Max severity Sentry flaw allows code execution as root

Jun 10, 2026 // 10:36

Security software company Ivanti has released patches to address two critical vulnerabilities in its Sentry secure mobile gateway solution, including a maximum-severity flaw that enables […]

New HTTP/2 Bomb Vulnerability Allows Remote DoS on NGINX, Apache, IIS, Envoy & Cloudflare

Jun 3, 2026 // 11:39

Cybersecurity researchers have discovered a remote denial-of-service exploit that affects major web servers, including NGINX, Apache HTTPD, Microsoft IIS, Envoy, and Cloudflare Pingora. The vulnerability […]

Max-severity flaw in ChromaDB for AI apps allows server hijacking

May 20, 2026 // 01:36

A max-severity vulnerability in the latest Python FastAPI version of the ChromaDB project allows unauthenticated attackers to run arbitrary code on exposed servers. The flaw […]

18-year-old NGINX vulnerability allows DoS, potential RCE

May 14, 2026 // 20:57

An 18-year-old flaw in the NGINX open-source web server, discovered using an autonomous scanning system, can be exploited for denial of service and, under certain […]

New critical Exim mailer flaw allows remote code execution

May 14, 2026 // 00:57

A critical vulnerability affecting certain configurations of the Exim open-source mail transfer agent could be exploited by an unauthenticated remote attacker to execute arbitrary code. […]

New critical Exim mailer flaw allows remote code execution

May 14, 2026 // 00:36

A critical vulnerability affecting certain configurations of the Exim open-source mail transfer agent could be exploited by an unauthenticated remote attacker to execute arbitrary code. […]

Ollama Out-of-Bounds Read Vulnerability Allows Remote Process Memory Leak

May 10, 2026 // 15:42

Cybersecurity researchers have disclosed a critical security vulnerability in Ollama that, if successfully exploited, could allow a remote, unauthenticated attacker to leak its entire process […]

1 2 Next