Flash Notices

Flash Notice: Google Releases Patch for Actively Exploited Chrome Zero-Day

Google has urgently released a security update to address a critical zero-day vulnerability (CVE-2025-10585) in its Chrome web browser.

Flash Notice: Hackers Hijack NPM Packages - Multi-Billion Weekly Downloads Targeted in Supply Chain Attack

A major software supply chain attack has shaken the open-source JavaScript ecosystem, as attackers hijacked several high-profile npm packages.

Flash Notice: Critical Memory Overflow in Citrix NetScaler ADC & Gateway

CVE-2025-7775 is a critical memory overflow vulnerability in Citrix NetScaler ADC and NetScaler Gateway that enables unauthenticated RCE and/or DoS.

Flash Notice: Critical Unauthenticated RCE in Microsoft SharePoint Server

CVE-2025-53770 is a critical unauthenticated remote code execution (RCE) vulnerability affecting on-premises Microsoft SharePoint Server deployments.

Flash Notice: WordPress Review Plugin Local File Inclusion

CVE-2025-2158 is a high-severity LFI vulnerability affecting the WordPress Review Plugin: The Ultimate Solution for Building a Review Website.

Flash Notice: Azure Information Disclosure Vulnerability

CVE-2025-33072 is a high-severity information disclosure vulnerability in Microsoft Azure resulting from improper access control on a web service endpoint.

Flash Notice: Azure Automation Privilege Elevation Vulnerability

CVE-2025-29827 is a critical vulnerability affecting Microsoft's Azure Automation service.

Flash Notice: Codeastro Bus Ticket Booking System SQL Injection Vulnerability

CVE-2025-25775 is a critical SQL injection vulnerability identified in Codeastro Bus Ticket Booking System v1.0.

Flash Notice: Critical Object Injection in FluentBoards

CVE-2025-39551 is a critical deserialization vulnerability in FluentBoards that permits Object Injection via the unsafe deserialization of untrusted data.

Flash Notice: SAP NetWeaver Visual Composer Remote Code Execution Vulnerability

CVE-2025-31324 is a critical vulnerability affecting the SAP NetWeaver Visual Composer's Metadata Uploader component, which lacks proper auth controls.

Prev 1 2 3 4 5 Next