Critical Pre-Auth RCE Vulnerabilities Found in SysAid On-Premise ITSM Solution
Cybersecurity research firm watchTowr has disclosed multiple critical vulnerabilities in SysAid’s on-premises IT Service Management (ITSM)…
Category
Vulnerability
Critical Vulnerabilities Actively Exploited in SonicWall SMA Appliances
Security researchers at watchTowr have published an analysis of two vulnerabilities currently being exploited in the…
Apache Tomcat Releases Security Updates for DoS and Bypass Vulnerabilities
The Apache Software Foundation has released important security updates addressing two vulnerabilities in Apache Tomcat, the…
Critical RCE Vulnerability in Commvault Backup Software
Security researchers at watchTowr have disclosed a critical remote code execution (RCE) vulnerability in Commvault’s backup…
Critical Ivanti Connect Secure Vulnerability Under Active Exploitation by Chinese Hackers
A critical security vulnerability in Ivanti Connect Secure VPN appliances (CVE-2025-22457) is being actively exploited by…
Critical Authentication Bypass Vulnerability Discovered in CrushFTP
A severe authentication bypass vulnerability has been identified in CrushFTP, a popular multi-protocol file transfer server…
IngressNightmare – Critical RCE Vulnerabilities Expose Kubernetes Clusters
Cybersecurity researchers at Wiz (recently acquired by Google) have uncovered multiple severe vulnerabilities in the Ingress…
Auth Bypass Vulnerability Disclosed in Next.js Middleware
A critical security vulnerability has been identified in Next.js, the popular React framework, which could allow…
Critical Windows Vulnerability Leaks NTLM Hashes Without User Interaction
Security researchers have discovered and documented a critical Windows vulnerability (CVE-2025-24071) that enables attackers to steal…