#flaw


Critical Zimbra Flaw Could Let Crafted Emails Run Malicious Code in User Sessions

Jul 12, 2026 // 15:38

Zimbra is urging customers to apply updates to address a critical security vulnerability impacting the Classic Web Client that could result in arbitrary code execution. […]

Zimbra urges customers to patch critical web client XSS flaw

Jul 10, 2026 // 16:56

The Zimbra security team urged customers to patch a critical vulnerability affecting the Classic Web Client used to access the Zimbra Collaboration suite. Zimbra is […]

Unpatched XRING Flaw in XQUIC Lets Remote Clients Crash HTTP/3 Servers

Jul 10, 2026 // 16:45

A single wrong variable on one line in XQUIC, Alibaba’s QUIC and HTTP/3 library, lets any remote client crash the server with a short burst […]

Microsoft Patches RoguePlanet Defender Flaw That Can Grant SYSTEM Privileges

Jul 9, 2026 // 14:32

Microsoft has released security updates for a Defender vulnerability known as RoguePlanet, nearly a month after details of the flaw became public. The vulnerability, tracked […]

Hackers exploit Roundcube flaw to spy on academic researchers

Jul 8, 2026 // 23:37

A China-linked threat cluster has been exploiting vulnerable Roundcube servers at U.S. and Canadian universities to steal credentials and deploy backdoor malware. The campaign has […]

CISA orders feds to prioritize patching Langflow auth bypass flaw

Jul 8, 2026 // 13:37

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) gave federal agencies until Friday to patch an actively exploited vulnerability in the Langflow visual framework for […]

CISA orders feds to patch max severity ColdFusion flaw by Friday

Jul 8, 2026 // 11:02

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered government agencies to patch an actively exploited maximum-severity flaw in the Adobe ColdFusion commercial web […]

15-Year-Old GhostLock Flaw Enables Root and Container Escape on Most Linux Distros

Jul 8, 2026 // 09:19

Researchers at Nebula Security have disclosed GhostLock (CVE-2026-43499), a 15-year-old Linux kernel flaw that lets any logged-in user take full root control of a machine that has not been […]

Rogue Agent Flaw Could Have Let Attackers Hijack Google Dialogflow CX Chatbots

Jul 7, 2026 // 19:39

A critical flaw in Google’s Dialogflow CX could have let an attacker with edit rights on one chatbot take over every chatbot in the same […]

Writer AI Flaw Could Let Agent Previews Leak Session Tokens Across Tenants

Jul 7, 2026 // 18:21

Cybersecurity researchers have disclosed details of a now-patched critical session isolation vulnerability in Writer, an enterprise generative artificial intelligence (AI) platform, that could result in […]

Previous 1 … 41 42 43 44 45 … 60 Next