A critical path traversal vulnerability in Commvault Command Center could allow unauthenticated users to execute remote code, posing significant security risks to affected systems.
Every 24 hours
Tech
Original briefings on what changed in security. Each story has a small illustration matched to what it covers, a short structure, and links to the catalog records and public identifiers it discusses.
A serious vulnerability affecting multiple Apple products has been addressed, potentially allowing attackers to bypass security measures and exploit targeted individuals.
Apple has released updates to address a significant memory corruption vulnerability that could lead to code execution through malicious media files.
A significant vulnerability in the Yii Framework could allow remote attackers to execute arbitrary code, impacting various applications built on this framework.
Research · Apr 7, 2025
Critical Authentication Flaw Discovered in Langflow
A significant vulnerability in Langflow allows unauthenticated attackers to execute arbitrary code, impacting versions prior to 1.3.0.
A critical deserialization vulnerability has been identified in Gladinet CentreStack, affecting versions up to 16.1.10296.56315, which can lead to remote code execution if exploited.
A significant stack-based buffer overflow vulnerability has been identified in Ivanti Connect Secure, Policy Secure, and ZTA Gateways, allowing remote code execution for unauthenticated attackers.
A critical authentication bypass vulnerability has been identified in Kentico Xperience CMS, potentially allowing unauthorized access to administrative functions.
A newly identified vulnerability in Kentico Xperience CMS allows for authentication bypass, posing a significant risk to administrative controls.
A moderately critical cross-site scripting vulnerability has been identified in Drupal core, potentially impacting numerous users and applications.
A significant vulnerability has been identified in the reviewdog GitHub Actions, allowing malicious code to expose sensitive secrets in workflow logs.
A newly discovered vulnerability in AMI MegaRAC SPx allows attackers to bypass authentication remotely, posing significant risks to system integrity and confidentiality.