A critical vulnerability in the vBulletin forum software allows unauthenticated attackers to execute arbitrary PHP code ...

Broadcom fixes two critical VMware vCenter flaws and a VMXNET3 ESX escape, with no evidence of exploitation in the wild.

ServiceNow CVE-2026-6875, a critical unauthenticated RCE in the AI Platform, is under active exploitation. Threat intelligence firm Defused confirmed a second sandbox-escape gadget chain that bypasses ...

Chrome Firefox security update July 2026 delivered emergency patches across five vendors on July 15: Mozilla confirmed public exploit code for both critical Firefox 152.0.6 CVEs, Google patched two ...

Hackers are actively exploiting the critical CVE-2026-50522 vulnerability in Microsoft SharePoint to steal machine keys and ...

Windows Server 2025 is currently open to a Remote Code Execution exploit via the Windows Update Service, and at the time of this writing a fix from Microsoft has yet to fully patch the issue. Reports ...

A newly published BootROM exploit targeting iPhone 11 and A12/A13 chips has been pulled offline after Magnet Forensics sued ...

VulnCheck says attackers are exploiting Windmill CVE-2026-29059 to read server files, with about 170 vulnerable systems ...

The risk of attackers exploiting a recently disclosed maximum severity vulnerability in Cisco's IOS XE Wireless Controller software has increased significantly following the public release of detailed ...