CVE-2025-59719: FortiWeb SAML Authentication Flaw Enables Full Login Bypass
Vulnerability Summary Overview Fortinet has addressed a critical authentication bypass vulnerability in its FortiWeb Web Application Firewall…
continue reading..
CVE-2025-67494: ZITADEL Login UI Flaw Enables Unauthenticated Full-Read SSRF
Vulnerability Summary Overview ZITADEL has fixed a critical security issue that allowed unauthenticated attackers to abuse the…
continue reading..
CVE-2025-66516: Apache Tika PDF Parsing Vulnerability Enables XXE Attacks
Vulnerability Summary Overview Apache Tika has addressed a high-severity security issue involving the processing of XFA (XML…
continue reading..
Rhode Island State Systems Hit by Significant Data Breach
The Rhode Island state government has confirmed that it has suffered a large-scale cybersecurity breach that exposed…
continue reading..
CVE-2025-62472: Windows RasMan Privilege Escalation Vulnerability
Vulnerability Summary Overview Microsoft has addressed a serious local privilege escalation vulnerability in the Windows Remote Access…
continue reading..
CVE-2025-62562: Microsoft Patches Outlook RCE Risk
Microsoft addressed CVE-2025-62562 as part of its December 2025 Patch Tuesday release. The vulnerability affects Microsoft Outlook…
continue reading..
Atlassian’s December Security Update: What Teams Need to Know Now
Atlassian has released a coordinated set of security updates as part of its December security cycle, addressing…
continue reading..
CVE-2025-6218: WinRAR Path Traversal Used to Silently Install Malware
CVE ID: CVE-2025-6218CVSS Score: 7.8 (High)Status: Actively exploited by multiple threat groupsAdded to CISA KEV: December 10,…
continue reading..
CVE-2025-67779: React Server Components DoS Persists After Initial Fix
Vulnerability Name: React / Next.js React Server Components Denial of ServiceCVE ID: CVE-2025-67779Vulnerability Type: Denial of Service…
continue reading..
