News Over 10,000 Zimbra servers vulnerable to ongoing XSS attacks
Over 10,000 Zimbra Collaboration Suite (ZCS) instances exposed online are vulnerable to ongoing attacks exploiting a cro...
Information Disclosure
News 
News CISA flags new SD-WAN flaw as actively exploited in attacks
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has given government agencies four days to secure their...
News Critical Citrix NetScaler memory flaw actively exploited in attacks
Hackers are exploiting a critical severity vulnerability, tracked as CVE-2026-3055, in Citrix NetScaler ADC and NetScal...
News File read flaw in Smart Slider plugin impacts 500K WordPress sites
A vulnerability in the Smart Slider 3 WordPress plugin, active on more than 800,000 websites, can be exploited to allow ...
News CISA flags Wing FTP Server flaw as actively exploited in attacks
CISA warned U.S. government agencies to secure their Wing FTP Server instances against an actively exploited vulnerabili...
News Chainlit AI framework bugs let hackers breach cloud environments
Two high-severity vulnerabilities in Chainlit, a popular open-source framework for building conversational AI applicatio...
News 最大深刻度のNi8mareの欠陥が、約60,000のn8nインスタンスに影響
オンラインで公開されている約60,000のn8nインスタンスが、"Ni8mare "と呼ばれる最大深刻度の脆弱性に対するパッチを適用されていない。 n8nはオープンソースのワークフロー自動化プラットフォームであり、ユーザーはあらかじめ構築さ...
News シスコ、Identity Service Engineの脆弱性を悪用コードで警告
Cisco は、Identity Services Engine (ISE) ネットワークアクセス制御ソリューションに、管理者権限を持つ攻撃者に悪用される可能性のある脆弱性のパッチを適用し、概念実証済みのエクスプロイトコードを公開した。 企...
News Google fixes two Android zero days exploited in attacks, 107 flaws
Google has released the December 2025 Android security bulletin, addressing 107 vulnerabilities, including two flaws act...
News Hackers exploit WordPress plugin Post SMTP to hijack admin accounts
Threat actors are actively exploiting a critical vulnerability in the Post SMTP plugin installed on more than 400,000 Wo...