#flaw


Isolated-vm Flaw Lets Sandboxed JavaScript Escape to Host for Potential RCE

Aug 20, 2026 // 17:17

Cybersecurity researchers have disclosed a critical security flaw in isolated-vm, a popular open-source sandbox with more than 2,900 stars and 190 forks on GitHub, that […]

Isolated-vm Flaw Lets Sandboxed JavaScript Escape to Host for Potential RCE

Aug 20, 2026 // 17:07

Cybersecurity researchers have disclosed a critical security flaw in isolated-vm, a popular open-source sandbox with more than 2,900 stars and 190 forks on GitHub, that […]

Isolated-vm Flaw Lets Sandboxed JavaScript Escape to Host for Potential RCE

Aug 20, 2026 // 16:57

Cybersecurity researchers have disclosed a critical security flaw in isolated-vm, a popular open-source sandbox with more than 2,900 stars and 190 forks on GitHub, that […]

Critical NetScaler Flaw Can Bypass Authentication on Certain Gateway and AAA Servers

Aug 20, 2026 // 16:37

Citrix has released updates to address two security flaws impacting NetScaler ADC and NetScaler Gateway deployments, including a critical-severity authentication bypass vulnerability. According to the […]

Attackers Exploit Zimbra SNMP Flaw for Unauthenticated Remote Code Execution

Aug 20, 2026 // 16:26

A now-patched security flaw impacting Zimbra Collaboration (ZCS) has come under active exploitation in the wild, according to the Polish Computer Emergency Response Team (CERT […]

Critical Zimbra RCE flaw now actively exploited in attacks

Aug 20, 2026 // 12:57

CERT Polska, the Polish Computer Emergency Response Team (CERT), warned that attackers have begun exploiting a critical vulnerability in Zimbra Collaboration Suite (ZCS). ZCS is […]

Elementor Pro Flaw Could Let Unauthenticated Attackers Upload PHP and Execute Code

Aug 20, 2026 // 09:12

Cybersecurity researchers have disclosed details of a critical flaw in the Elementor Pro WordPress plugin that, if successfully exploited, could lead to remote code execution. […]

Critical RCE flaw in Windows IKE Extension now actively exploited

Aug 19, 2026 // 13:17

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned that hackers are exploiting a critical-severity remote code execution (RCE) flaw in the Windows Internet Key […]

Attackers Exploit MLflow SSRF Flaw to Steal Cloud Credentials and Secrets

Aug 18, 2026 // 23:28

Two critical vulnerabilities impacting MLflow, an open-source artificial intelligence (AI) platform, and FUXA, an open-source, web-based SCADA / HMI software built for operational technology (OT) […]

CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCE

Aug 18, 2026 // 13:52

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a critical flaw impacting Ray to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence […]

Previous 1 … 11 12 13 14 15 … 60 Next