Drupal released security updates for a highly critical Drupal Core vulnerability affecting sites that use PostgreSQL.

An unpatched vulnerability in ChromaDB could be exploited without authentication for remote code execution and server ...

Exim has released security updates to address a severe security issue affecting certain configurations that could enable ...

A critical vulnerability affecting certain configurations of the Exim open-source mail transfer agent could be exploited by ...

An 18-year-old flaw in the NGINX open-source web server, discovered using an autonomous scanning system, can be exploited for ...

A single rewrite rule, the kind pasted into NGINX configurations thousands of times a day, can hand an unauthenticated ...

A critical vulnerability in Gemini CLI led to remote code execution and supply chain attacks via indirect prompt injections.

A critical vulnerability discovered by AI spans most of the history of NGINX, which was first made available in 2004. The web ...

Malicious repositories can trigger code execution in Claude Code, Cursor CLI, Gemini CLI, and CoPilot CLI with minimal or no ...

Microsoft has released its August 2025 Patch package, a cumulative set of updates addressing more than 100 vulnerabilities across a host of its products. Microsoft’s SharePoint Server Remote Code ...

Remote code execution vulnerabilities pose especially critical threats to organizations, and VMware’s stronghold in data centers worldwide give patching these flaws particular urgency. VMware fixed ...

GitHub’s engineering team developed a fix and deployed it just over an hour after identifying the root cause, protecting both ...