Security

A denial-of-service vulnerability in BookStack versions prior to 25.12.1 can be triggered through its search functionality. An attacker can craft…

A critical remote code execution vulnerability affects Cockpit server management software versions 327 through 359. Tracked as CVE-2026-4631, the flaw…

A newly disclosed exploit targets a vulnerability in the Linux kernel’s AF_ALG interface, affecting versions 5.4 through 6.8. The flaw…

A critical vulnerability in cPanel & WHM’s cpsrvd daemon lets unauthenticated attackers gain full administrative access to a WHM server…

A critical authentication bypass in the WordPress Temporary Login Plugin versions up to 1.0.0 allows unauthenticated attackers to take over…

A security researcher has published a proof-of-concept exploit showing that the D-Link DSL2600U router leaks its admin configuration credentials through…

A double-free vulnerability in Apache HTTP Server 2.4.66’s mod_http2 module has been disclosed, enabling denial of service attacks against affected…

A remote code execution vulnerability in Grav CMS versions prior to 2.0.0-beta.2 has been disclosed, allowing attackers with administrative access…

Japanese telecommunications giant KDDI Corporation has disclosed a data breach that exposed the email addresses and passwords of up to…

OpenCATS, the open-source applicant tracking system, has a SQL injection vulnerability in versions up to 0.9.7.4. An authenticated attacker can…