Open WebUI, an open-source, self-hosted web interface for interacting with local or remote AI language models, carried a high ...

Critical n8n flaw CVE-2025-68668 allows authenticated users to run system commands via workflows; affects versions 1.0.0 to ...

The memory leak security vulnerability allows unauthenticated attackers to extract passwords and tokens from MongoDB servers.

Singapore’s CSA warns of a CVSS 10.0 SmarterMail vulnerability allowing unauthenticated remote code execution via file upload ...

Common vulnerabilities and exposures (CVEs) include all types of subversive entry-points discovered in programs, along with a ...

Microsoft has pushed back against claims that multiple prompt injection and sandbox-related issues raised by a security ...

The explosive, easy-to-trigger vulnerability was exploited within hours of disclosure, exposing the risks of default ...

The flaw is tracked as CVE-2025-54957 and its existence came to light in October 2025 after it was discovered by Google ...

A critical LangChain AI vulnerability exposes millions of apps to theft and code injection, prompting urgent patching and ...

Anyone who owns an Android device that is still supported should ensure that the current patch level 2026-01-05 is installed.

December 2025, the RondoDox botnet operators have been targeting Next.js servers impacted by the React2Shell vulnerability.

IBM urged customers to patch a critical authentication bypass vulnerability in its API Connect enterprise platform that could ...