Ivanti Endpoint Manager EFile Directory Traversal Remote Code Execution Vulnerability (CVE-2025-9712)
– This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Endpoint Manager.
Read MoreSecurity Vulnerabilities
The latest Security Vulnerabilities
Linux Kernel ksmbd generate_key context.iov_base Null Pointer Dereference Denial-of-Service Vulnerability (CVE-2025-38562)
– This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of the Linux Kernel.
Read More
Fortinet FortiWeb _cmf_get_config_file_path Directory Traversal Information Disclosure Vulnerability (CVE-2025-53609)
– This vulnerability allows remote attackers to disclose sensitive information on affected installations of Fortinet FortiWeb.
Read More
Cisco Secure Firewall Adaptive Security Appliance Software and Secure Firewall Threat Defense Software VPN Web Server Remote Code Execution Vulnerability
– A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an authenticated, remote attacker to execute arbitrary code on an affected device.
Read MoreMultiple Cisco products affected by Remote Code Execution Vulnerability (CVE-2025-20363)
– This vulnerability is due to improper validation of user-supplied input in HTTP requests.
Read More
Apple macOS OGG Audio File Header Parsing Memory Corruption Remote Code Execution Vulnerability (CVE-2025-43346)
– This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS.
Read More
Apple Safari IPC Connection Invalidation Use-After-Free Information Disclosure Vulnerability (CVE-2025-43368)
CVE number = CVE-2025-43368 This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple Safari. User
Read More
Digilent WaveForms DWF3WORK File Parsing Directory Traversal Remote Code Execution Vulnerability (CVE-2025-10203)
– This vulnerability allows remote attackers to execute arbitrary code on affected installations of Digilent WaveForms.
Read More
Palo Alto User-ID Credential Agent: Cleartext Exposure of Service Account password (CVE-2025-4235)
– An information exposure vulnerability in the Palo Alto Networks User-ID Credential Agent (Windows-based) can expose the service account password under specific non-default configurations.
Read More
Microsoft .NET IsTypeAuthorized Deserialization of Untrusted Data Denial-of-Service Vulnerability
– This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Microsoft .NET.
Read More