CVE-2025-54100: Windows PowerShell Code Execution Risk Due to Improper Processing of External Content
Overview CVE-2025-54100 is a PowerShell command execution flaw that happens when PowerShell processes external content (such as…
continue reading..
One Email Is Enough: The Roundcube Webmail Vulnerabilities You Can’t Ignore
Overview Roundcube Webmail is a long-standing, widely trusted open-source webmail platform used by shared hosting providers, enterprises,…
continue reading..
Understanding Vulnerabilities in Cybersecurity: From Weakness to Exploit
Understanding Vulnerabilities When we talk about vulnerabilities in cybersecurity, we are basically talking about weak points.Any weakness…
continue reading..
CVE-2025-37164: Unauthenticated Remote Code Execution in HPE OneView
Vulnerability Summary High-Level Summary CVE-2025-37164 is a critical security flaw in HPE OneView that allows a remote…
continue reading..
ICSA-25-352-08 – Axis Communications Camera Systems
ICSA-25-352-08 Axis Communications Camera Systems Release Date: December 19, 2025Severity: CriticalCVSS v3.1 Score: 9.0 Overview CISA has…
continue reading..
CVE-2025-68461: Exploiting SVG Animation to Hijack Roundcube Sessions
Vulnerability Summary Vulnerability Name: Cross-Site Scripting via SVG Animate TagCVE ID: CVE-2025-68461Severity: HighCVSS Score: 7.2CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:NCWE…
continue reading..
CVE-2025-14733: Zero-Day IKEv2 Flaw Enabling Remote WatchGuard Firewall Takeover
Vulnerability Summary Vulnerability Name: Out-of-Bounds Write in iked ProcessCVE ID: CVE-2025-14733CVSS v3.1 Score: 9.3CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HSeverity: CriticalExploitability:…
continue reading..
CVE-2025-12480: Zero-Day RCE Gladinet Triofox Access Flaw Enables Full SYSTEM Takeover of Exposed Servers
Vulnerability Summary Vulnerability Name: Gladinet Triofox Improper Access Control Leading to Remote Code ExecutionCVE ID: CVE-2025-12480CVSS Score:…
continue reading..
CVE-2025-61677: A Silent Code Execution Risk Inside DataChain’s AI Data Core
Vulnerability name: DataChain Data Storage – Unsafe Deserialization Leading to Remote Code ExecutionCVE ID: CVE-2025-61677CVSS v3 score:…
continue reading..
