vulnerability

Critical CrushFTP vulnerability exploited. Have you been targeted? (CVE-2025-54309)

July 21, 2025

Unknown attackers have exploited a vulnerability (CVE-2025‑54309) in the CrushFTP enterprise file-transfer server solution to gain administrative access to vulnerable …

SonicWall SMA devices persistently infected with stealthy OVERSTEP backdoor and rootkit

July 16, 2025

Unknown intruders are targeting fully patched end-of-life SonicWall Secure Mobile Access (SMA) 100 series appliances and deploying a novel, persistent backdoor / rootkit, …

Vulnerable firmware for Gigabyte motherboards could allow bootkit installation

July 15, 2025

UEFI firmware running on 100+ Gigabyte motherboard models is affected by memory corruption vulnerabilities that may allow attackers to install persistent and …

Exploits for unauthenticated FortiWeb RCE are public, so patch quickly! (CVE-2025-25257)

July 14, 2025

With two proof-of-concept (PoC) exploits made public late last week, CVE-2025-25257 – a critical SQL command injection vulnerability in Fortinet’s FortiWeb web …

Critical Wing FTP Server vulnerability exploited in the wild (CVE-2025-47812)

July 11, 2025

Threat actors are actively exploiting a recently fixed remote code execution vulnerability (CVE-2025-47812) in Wing FTP Server, security researchers have warned. Wing FTP …

Ruckus network management solutions riddled with unpatched vulnerabilities

July 10, 2025

Claroty researcher Noam Moshe has discovered serious vulnerabilities in two Ruckus Networks (formerly Ruckus Wireless) products that may allow attackers to compromise the …

Cisco fixes maximum-severity flaw in enterprise unified comms platform (CVE-2025-20309)

July 3, 2025

Cisco has found a backdoor account in yet another of its software solutions: CVE-2025-20309, stemming from default credentials for the root account, could allow …

Sudo local privilege escalation vulnerabilities fixed (CVE-2025-32462, CVE-2025-32463)

July 1, 2025

If you haven’t recently updated the Sudo utility on your Linux box(es), you should do so now, to patch two local privilege escalation vulnerabilities (CVE-2025-32462, …

CitrixBleed 2 might be actively exploited (CVE-2025-5777)

June 30, 2025

While Citrix has observed some instances where CVE-2025-6543 has been exploited on vulnerable NetScaler networking appliances, the company still says that they don’t …

Flaw in Notepad++ installer could grant attackers SYSTEM access (CVE-2025-49144)

June 25, 2025

A high-severity vulnerability (CVE-2025-49144) in the Notepad++ installer could be exploited by unprivileged users to gain SYSTEM-level privileges through insecure executable …

High-risk WinRAR RCE vulnerability patched, update quickly! (CVE-2025-6218)

June 24, 2025

A recently patched directory traversal vulnerability (CVE-2025-6218) in WinRAR could be leveraged by remote attackers to execute arbitrary code on affected installations. The …

Critical Citrix NetScaler bug fixed, upgrade ASAP! (CVE-2025-5777)

June 23, 2025

Citrix has fixed a critical vulnerability (CVE-2025-5777) in NetScaler ADC and NetScaler Gateway reminiscent of the infamous and widely exploited CitrixBleed flaw. The …