The latest Security Vulnerabilities
CVE number = CVE-2025-43283 This vulnerability allows local attackers to disclose sensitive information on affected installations of Apple macOS. An
Read More– The database account and password are hardcoded, allowing login with the account to manipulate the database in MagicInfo9 Server.
Read More– This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hancom Office.
Read More– Missing Authorization vulnerability in Imaginate Solutions File Uploads Addon for WooCommerce woo-addon-uploads allows Exploiting Incorrectly Configured Access Control Security Levels.
Read More– A vulnerability in the read-only maintenance shell of Cisco Intersight Virtual Appliance could allow an authenticated, local attacker with administrative privileges to elevate privileges to root on the virtual appliance.
Read MoreCVE number = CVE-2026-20045 A vulnerability in Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition
Read More– This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Enel X JuiceBox 40 charging stations.
Read MoreCVE number = CVE-2026-23800 This could allow a malicious actor to escalate their low privileged account to something with higher
Read More– On December 10th 2025 Cisco became aware of a new cyberattack campaign targeting a limited subset of appliances with certain ports open to the internet that are running Cisco AsyncOS Software for Cisco Secure Email Gateway and Cisco Secure Email and Web Manager.
Read More– This vulnerability allows local attackers to escalate privileges on affected installations of npm cli.
Read More
