Assetnote

Critical Adobe Commerce, Magento vulnerability under attack (CVE-2025-54236)

October 23, 2025

Attackers are trying to exploit CVE-2025-54236, a critical vulnerability affecting Adobe Commerce and Magento Open Source, Sansec researchers have warned. The company blocked …

Attackers are chaining flaws to breach Palo Alto Networks firewalls

February 19, 2025

Exploitation attempts targeting CVE-2025-0108, a recently disclosed authentication bypass vulnerability affecting the management web interface of Palo Alto Networks’ …

PAN-OS authentication bypass hole plugged, PoC is public (CVE-2025-0108)

February 13, 2025

Palo Alto Networks has fixed a high-severity authentication bypass vulnerability (CVE-2025-0108) in the management web interface of its next-gen firewalls, a proof-of-concept …

Citrix Bleed: Mass exploitation in progress (CVE-2023-4966)

October 30, 2023

CVE-2023-4966, aka “Citrix Bleed”, a critical information disclosure vulnerability affecting Citrix NetScaler ADC/Gateway devices, is being massively exploited by …

Critical vulnerability in WS_FTP Server exploited by attackers (CVE-2023-40044)

October 2, 2023

Progress Software, the company behind the recently hacked MOVEit file-sharing tool, has recently fixed two critical vulnerabilities (CVE-2023-40044, CVE-2023-42657) in WS_FTP …

Easily exploitable flaw in Oracle Opera could spell trouble for hotel chains (CVE-2023-21932)

May 2, 2023

A recently patched vulnerability (CVE-2023-21932) in Oracle Opera, a property management system widely used in large hotel and resort chains, is more critical than Oracle says …