Fortra has released emergency patches for a critical vulnerability (CVE-2025-10035) in GoAnywhere MFT file transfer software that could allow remote code execution without user interaction. The flaw affects the License Servlet component and enables attackers with forged license signatures ...
Cisco has issued an urgent security bulletin for two critical vulnerabilities (CVE-2025-20281 and CVE-2025-20282) in its Identity Services Engine (ISE) and Passive Identity Connector platforms, both rated 10.0 on the CVSS scale. These flaws allow unauthenticated remote code execution with ...
CISA alerts about active exploitation of a critical security vulnerability (CVE-2025-23209) in Craft CMS versions 4 and 5, enabling remote code execution if system security keys are compromised. The agency mandates federal patches by March 13, 2025, and recommends immediate upgrades to ver...
A critical vulnerability (CVE-2024-53677) in Apache Struts 2 is being actively exploited, allowing attackers to perform path traversals and upload malicious files for potential remote code execution. The flaw, rated 9.5 CVSS, affects multiple versions and requires urgent upgrades to Struts...
