Security Vulnerabilities

The latest Security Vulnerabilities

NewsSecurity Vulnerabilities

Delta Electronics CNCSoft-G2 DPAX File Parsing Memory Corruption Remote Code Execution Vulnerability (CVE-2025-47728)

– This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics CNCSoft-G2.

Read More
NewsSecurity Vulnerabilities

Cisco Meraki MX and Z Series AnyConnect VPN Authentication Denial of Service Vulnerability (CVE-2025-20271)

– A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition in the Cisco AnyConnect service on an affected device.

Read More
NewsSecurity Vulnerabilities

ClamAV UDF File Parsing Out-of-Bounds Read Information Disclosure Vulnerability (CVE-2025-20234)

CVE number = CVE-2025-20234 A vulnerability in Universal Disk Format (UDF) processing of ClamAV could allow an unauthenticated, remote attacker

Read More
NewsSecurity Vulnerabilities

Siemens TeleControl Server Basic CreateTrace SQL Injection Remote Code Execution Vulnerability (CVE-2025-27495)

– This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens TeleControl Server Basic.

Read More
NewsSecurity Vulnerabilities

Microsoft WEBDAV Remote Code Execution Vulnerability (CVE-2025-33053)

– A newly discovered critical zero-day remote code execution (RCE) vulnerability in Microsoft Windows, identified as CVE-2025-33053, is being actively exploited by the Stealth Falcon advanced persistent threat (APT) group, also known as FruityArmor.

Read More
NewsSecurity Vulnerabilities

Ubiquiti Networks UniFi Console Missing Authentication for Critical Function Authentication Bypass Vulnerability (CVE-2025-23116)

– This vulnerability allows network-adjacent attackers to bypass authentication on affected Ubiquiti Networks UniFi Console devices.

Read More
NewsSecurity Vulnerabilities

Ubiquiti Networks AI Bullet Insufficient Firmware Update Validation Remote Code Execution Vulnerability (CVE-2025-23117)

– This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Ubiquiti Networks AI Bullet Cameras.

Read More
NewsSecurity Vulnerabilities

Microsoft Visual Studio initializeCommand Insufficient UI Warning Remote Code Execution Vulnerability (CVE-2025-47959)

– This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Visual Studio.

Read More
NewsSecurity Vulnerabilities

Hewlett Packard Enterprise Directory Traversal Remote Code Execution Vulnerability (CVE-2025-37099)

– This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hewlett Packard Enterprise Insight Remote Support. Authentication is not required to exploit this vulnerability.

Read More
NewsSecurity Vulnerabilities

Cisco Identity Services Engine on Cloud Platforms Static Credential Vulnerability (CVE-2025-20286)

– A critical vulnerability in Amazon Web Services (AWS), Microsoft Azure, and Oracle Cloud Infrastructure (OCI) cloud deployments of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to access sensitive data, execute limited administrative operations, modify system configurations, or disrupt services within the impacted systems.

Read More