Dashboard

Critical vulnerability in Vite allows exposure of sensitive files using ?inline&import or ?raw?import parameters.

Two critical vulnerabilities in vBulletin allow unauthenticated remote code execution via API method bypass and template engine exploitation.

Nation-state actors actively exploiting authentication bypass and code injection vulnerabilities in Ivanti Endpoint Manager Mobile.

Critical stack-based buffer overflow in multiple Fortinet products allows unauthenticated remote code execution.

Multiple security flaws in TeleMessage services expose sensitive user data despite claims of end-to-end encryption.

Actively exploited vulnerability in Samsung MagicINFO 9 Server allows attackers to write arbitrary files with system privileges.

Insufficient policy enforcement in Chromium-based browsers allows attackers to leak cross-origin data via crafted HTML pages.