Security

A security researcher has disclosed a chain of three vulnerabilities in the Linux kernel that allows a local, unprivileged attacker…

Two more ZTE router models have serious unauthenticated vulnerabilities. The H298A and H108N expose the live administrator password, Wi-Fi PSK,…

A vulnerability in the ZTE ZXHN H188A V6 router allows an unauthenticated attacker to grab the admin password and Wi-Fi…

A security researcher has disclosed a vulnerability in over 17 ZTE router models that allows an attacker to crash or…

Security researchers have found that a specially crafted image file can cause ImageMagick to loop forever, pinning a CPU core…

A critical vulnerability in the Quick Playground WordPress plugin lets attackers upload arbitrary files and achieve remote code execution —…

A security researcher has disclosed a remote code execution vulnerability in Langflow, a popular open-source AI workflow platform. Tracked as…

A SQL injection vulnerability has been found in MikroORM, a popular Node.js ORM, affecting versions up to 7.0.13. Tracked as…

A local file inclusion vulnerability in the Prodigy Commerce WordPress plugin affects versions up to 3.2.9. Tracked as CVE-2026-0926, the…

A security researcher has disclosed a spoofing vulnerability in Windows that lets attackers capture NTLMv2 password hashes with zero user…