Vulnerabilities
The vulnerability is CVE-2024-21182 and it can be exploited without authentication to hack affected WebLogic servers.
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
The authentication bypass allows attackers to execute arbitrary code as admin and take over XCP-ng nodes.
Vulnerabilities
Attackers could exploit them for command execution, memory overwrites, and privilege escalation.
Vulnerabilities
Attackers could exploit the bugs to tamper with certificate entries, achieve remote code execution, and compromise hosts.
Vulnerabilities
The massive drop comes after the company integrated frontier AI models into its product security testing.
Artificial Intelligence
Exploiting a confused deputy weakness, the hackers simply asked the chatbot to link the account to a new email address.
Vulnerabilities
Oracle’s monthly Critical Security Patch Update (CSPU) rollouts are meant to deliver critical fixes faster.
Vulnerabilities
The security defect (CVE-2026-8732) allows unauthenticated attackers to create administrative accounts on the affected installations.
Vulnerabilities
Organizations are advised to patch CVE-2026-41089 as soon as possible, given its severity, the potential ongoing exploitation.
Vulnerabilities
Proof-of-concept (PoC) exploit code has been released for the CIFSwitch flaw, which allows low-privileged users to escalate to root on vulnerable Linux systems.
Vulnerabilities
Hackers began exploiting CVE-2026-0257, an authentication bypass in Palo Alto Networks PAN-OS, four days after public disclosure.
Vulnerabilities
The one-click vulnerability allows attackers to execute arbitrary code on self-hosted Flowise servers by tricking users into importing a malicious chatflow.
Vulnerabilities
The critical-severity issue, assigned a CVSS score of 9.4, is an argument injection flaw that can be exploited by authenticated attackers via pull requests...
Vulnerabilities
The browser update resolves critical-severity security defects that could potentially lead to remote code execution.
Network Security
Fortinet rolled out hotfixes for the security defect in April, warning that it had been exploited in the wild as a zero-day and urging...
Vulnerabilities
Project Lightwell is designed to fix vulnerabilities without breaking what is already in production.
Vulnerabilities
The security flaw allowed attackers to pull private container images, exposing source code, credentials, and infrastructure.
Vulnerabilities
Novee researchers discovered an account takeover vulnerability in the open source CFP management tool Pretalx.
Vulnerabilities
Resolved last week, the vulnerability was exploited in the wild as a zero-day to execute scripts with root privileges.
Vulnerabilities
Hardcoded machineKey values in a configuration file enabled ViewState deserialization attacks leading to remote code execution.
Vulnerabilities
DockSec, an OWASP incubator project, correlates findings from multiple container security scanners and uses AI to generate plain-English remediation guidance and exact Dockerfile fixes.
Vulnerabilities
Sites belonging to major universities such as Harvard and Oxford, as well as DuckDuckGo, have been compromised in the attack.
Artificial Intelligence
Many findings have been confirmed to be critical or high-severity vulnerabilities and the number will continue to increase.
Vulnerabilities
Drupal is warning users that it has already seen attempts to exploit CVE-2026-9082 and security firms are seeing attacks against thousands of websites.
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)