CVE-2025-14611: Actively Exploited Hardcoded Encryption Key Flaw in Gladinet Platforms
Overview CVE-2025-14611 is a high-risk security vulnerability identified in the Gladinet CentreStack and Triofox file-sharing platforms. The…
continue reading..
Critical Adobe Security Alert: Multiple High-Impact Vulnerabilities Across ColdFusion, AEM, and Acrobat
ColdFusion, Experience Manager, Acrobat & Reader, DNG SDK, Creative Cloud Desktop Adobe’s December 2025 security release addresses…
continue reading..
CVE-2025-59516 & CVE-2025-59517: Windows Storage VSP Driver Privilege Escalation Vulnerabilities
Vulnerability Summary CVE-2025-59516 CVE-2025-59517 Both vulnerabilities were addressed as part of Microsoft’s December 2025 security updates. Overview…
continue reading..
CVE-2025-62557: Microsoft Office Use-After-Free Bug Enables Remote Code Execution
Vulnerability Summary Overview CVE-2025-62557 is a serious remote code execution vulnerability in Microsoft Office caused by a…
continue reading..
CVE-2025-62554: Microsoft Office Type Confusion Flaw Enables Remote Code Execution
Vulnerability Summary Overview CVE-2025-62554 is a serious remote code execution vulnerability affecting Microsoft Office. The flaw allows…
continue reading..
CVE-2025-48572: Android Framework Zero-Day Enables Privilege Escalation Attacks
Vulnerability Summary Overview CVE-2025-48572 is a serious security flaw in the core Android operating system that attackers…
continue reading..
CVE-2025-14265: ScreenConnect Extension Integrity Flaw Enables Server Compromise
Vulnerability Summary Overview ConnectWise has disclosed and fixed a critical security flaw in the ScreenConnect server that…
continue reading..
CVE-2025-59719: FortiWeb SAML Authentication Flaw Enables Full Login Bypass
Vulnerability Summary Overview Fortinet has addressed a critical authentication bypass vulnerability in its FortiWeb Web Application Firewall…
continue reading..
CVE-2025-67494: ZITADEL Login UI Flaw Enables Unauthenticated Full-Read SSRF
Vulnerability Summary Overview ZITADEL has fixed a critical security issue that allowed unauthenticated attackers to abuse the…
continue reading..
