7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability (CVE-2025-11002)
– This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip.
Read MoreSecurity Vulnerabilities
The latest Security Vulnerabilities
Allegra DatabaseBackupBL Directory Traversal Information Disclosure Vulnerability (CVE-2025-11466)
– This vulnerability allows remote attackers to disclose sensitive information on affected installations of Allegra.
Read MoreActive exploitation of vulnerability affecting Oracle E-Business Suite (CVE-2025-61882)
– Oracle has published a security update to address an unauthenticated remote vulnerability (CVE-2025-61882) affecting Oracle E-Business Suite (EBS).
Read More
win-cli-mcp-server resolveCommandPath Command Injection Remote Code Execution Vulnerability (CVE-2025-11202)
– This vulnerability allows remote attackers to execute arbitrary code on affected installations of win-cli-mcp-server.
Read More
Ivanti Endpoint Manager EFile Directory Traversal Remote Code Execution Vulnerability (CVE-2025-9712)
– This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Endpoint Manager.
Read More
Linux Kernel ksmbd generate_key context.iov_base Null Pointer Dereference Denial-of-Service Vulnerability (CVE-2025-38562)
– This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of the Linux Kernel.
Read More
Fortinet FortiWeb _cmf_get_config_file_path Directory Traversal Information Disclosure Vulnerability (CVE-2025-53609)
– This vulnerability allows remote attackers to disclose sensitive information on affected installations of Fortinet FortiWeb.
Read More
Cisco Secure Firewall Adaptive Security Appliance Software and Secure Firewall Threat Defense Software VPN Web Server Remote Code Execution Vulnerability
– A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an authenticated, remote attacker to execute arbitrary code on an affected device.
Read MoreMultiple Cisco products affected by Remote Code Execution Vulnerability (CVE-2025-20363)
– This vulnerability is due to improper validation of user-supplied input in HTTP requests.
Read MoreApple macOS OGG Audio File Header Parsing Memory Corruption Remote Code Execution Vulnerability (CVE-2025-43346)
– This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS.
Read More