Hackers Targeted LiteLLM’s AI Gateway Just 36 Hours After Critical SQL Injection Flaw Went Public
A critical, unauthenticated SQL injection vulnerability in LiteLLM — the open-source gateway that tens of thousands…
Category
Vulnerability
Anthropic’s MCP Design Flaw Enables Remote Code Execution Across 200,000+ AI Servers
A single architectural decision baked into Anthropic’s Model Context Protocol has quietly turned the backbone of…
PHP Composer Hit by Two Command Injection Flaws That Work Even Without Perforce Installed
If you use PHP’s Composer package manager, stop what you’re doing and run composer.phar selfupdate right…
Critical Axios Flaw Enables Full Cloud Takeover
Axios, the JavaScript HTTP client powering over 100 million npm downloads every week, is under fire…
Fortinet Rushes Emergency Patch After Zero-Day in FortiClient EMS Caught Mid-Exploitation
A critical zero-day vulnerability in Fortinet’s FortiClient Endpoint Management Server (EMS) was already being weaponized by…
Progress ShareFile Storage Zone Controller Hit With Critical Pre-Auth RCE Chain — Patch Now
Offensive security firm watchTowr has disclosed a critical two-vulnerability chain in Progress ShareFile’s on-premises Storage Zone…
Opening a Single File in Vim Can Hand Attackers Full Control of Your System
A two-bug chain quietly sitting in Vim since version 9.1.1391 lets a malicious file execute arbitrary…
One Packet. Full Root. GNU Telnetd Has a Critical Hole Nobody Logged
Security researchers have found a critical, pre-authentication remote code execution flaw in the telnetd server in…
Hackers Could Hijack Your Machine Just by Sharing a Git Repo — Claude Code Users Were at Risk
Developers who use Anthropic’s Claude Code to write software with AI assistance were sitting on a…