A critical insecure PHP deserialization vulnerability (CVE-2025-2244) has been resolved in Bitdefender GravityZone Console, the centralized security management platform enterprises use globally.
The flaw,...
Apache Traffic Server (ATS), a high-performance HTTP proxy server used by major CDNs, has been found vulnerable to HTTP request smuggling attacks due to...
CVE-2025-30065 has been discovered in the Apache Parquet Java library, specifically within its parquet-avro module.
This flaw is categorized as Deserialization of Untrusted Data (CWE-502)...
Bishop Fox researchers have successfully exploited CVE-2024-53704, a critical authentication bypass vulnerability in SonicWall firewalls, enabling remote attackers to hijack active SSL VPN sessions...
Jenkins, the widely used open-source automation server, issued a high-priority security advisory (2025-04-02) addressing eight vulnerabilities across its core platform and seven plugins.
The...