Sign in Subscribe

vulnerability

Everything tagged vulnerability.

Share your story Subscribe

Featured

AWS says PHP2Shell exploit attempt came four days before disclosure

AWS says PHP2Shell exploit attempt came four days before disclosure

DP News TeamOct 22, 2026

Public records show four MCP SSRF fixes; researcher claims fifth

Public records show four MCP SSRF fixes; researcher claims fifth

Meta patches Muse setting that let local malware hijack the AI agent

Meta patches Muse setting that let local malware hijack the AI agent

Latest

News
Critical Splunk Enterprise flaw rated CVSS 9.8 is under active attack as CISA sets a June 21 patch deadline
Splunk's PSIRT says CVE-2026-20253, an unauthenticated remote-code-execution flaw in Splunk Enterprise at CVSS 9.8, is under limited exploitation;…
Dmytro Spodarets · Jun 21
News
Critical Langflow flaw is under active attack on 7,000 exposed AI-agent servers
An unsanitized file-upload endpoint allows remote code execution, and Langflow's default unauthenticated auto-login makes exploitation trivial.
Dmytro Spodarets · Jun 14
News
CISA sets June 14 deadline for max-severity Ivanti Sentry flaw used to backdoor servers
CVE-2026-10520 is a CVSS 10.0 unauthenticated bug that hands attackers root. Researchers found at least two exposed instances already backdoored.
Dmytro Spodarets · Jun 14
News
Microsoft's June Patch Tuesday fixes a record 206 vulnerabilities
The update is the largest on record and includes three publicly disclosed zero-days in BitLocker, HTTP.sys and Windows CTF.
Dmytro Spodarets · Jun 11