Research · Oct 4, 2025
Critical Vulnerability Discovered in Oracle E-Business Suite
A severe vulnerability has been identified in Oracle E-Business Suite, potentially allowing unauthorized access to sensitive components.
Every 24 hours
Tech
Original briefings on what changed in security. Each story has a small illustration matched to what it covers, a short structure, and links to the catalog records and public identifiers it discusses.
A newly discovered vulnerability in VMware Aria Operations and VMware Tools allows non-administrative users to escalate privileges, posing significant security risks.
A serious type confusion vulnerability in Google Chrome's V8 engine could enable remote attackers to exploit heap corruption through malicious HTML content.
A serious deserialization vulnerability has been identified in SolarWinds Web Help Desk, allowing potential remote code execution on affected systems.
Research · Sep 18, 2025
Critical Vulnerability Discovered in Fortra GoAnywhere MFT
A serious deserialization vulnerability has been identified in Fortra's GoAnywhere MFT, potentially allowing attackers to execute arbitrary commands.
A newly identified out-of-bounds write vulnerability in WatchGuard Firebox could allow remote attackers to execute arbitrary code, posing significant risks to network security.
A newly identified out-of-bounds write vulnerability in Samsung mobile devices poses significant risks, enabling potential remote code execution by attackers.
Adobe has identified a significant vulnerability in its Commerce and Magento platforms that could allow attackers to take over user sessions without requiring interaction.
The Linux kernel has patched a vulnerability related to improper handling of zero-length records in TLS, enhancing security for data transmission.
A serious deserialization vulnerability has been identified in multiple Sitecore products, potentially allowing attackers to execute remote code through default machine keys.
A significant vulnerability has been identified in Sangoma FreePBX, allowing unauthenticated access to the administrator interface, which could lead to severe security breaches.
A significant memory overflow vulnerability has been identified in Citrix NetScaler, potentially leading to remote code execution or denial of service.