This critical (CVSS 10.0) use-after-free (UAF) vulnerability in Lua scripting could allow authenticated attackers to execute ...

QNAP patched two dozen vulnerabilities across its product portfolio, including 7 flaws demonstrated at Pwn2Own Ireland 2025.

Google announced a fresh set of security updates for the Android platform, to address two vulnerabilities in the System component.

Security researchers at software supply chain company JFrog Ltd. today revealed details of a critical vulnerability in React, ...

A security vulnerability in the Redis database allows attackers to inject and execute malicious code. An update is available.

A new commercial-grade Android spyware, dubbed Landfall, has been discovered exploiting zero-day vulnerabilities in Samsung Galaxy devices.

Vulnerabilities in the contact center solution can result in authentication bypass and remote code execution. The networking company also warned of new attacks on previously patched firewall products.

The bug exposes the Metro development server to remote attacks, allowing arbitrary OS command execution on developer systems ...

Cisco warned this week that two vulnerabilities, which have been exploited in zero-day attacks, are now being abused to force ...

A severe vulnerability was discovered in the React Native Community CLI, a popular open-source package downloaded nearly two million times every week by developers building cross-platform applications ...

Flaws in Windows Graphics Device Interface (GDI) have been identified that allow remote code execution and information ...

Security researchers discovered multiple vulnerabilities in AI infrastructure products, including one capable of remote code ...