Citrix je objavil varnostno obvestilo o osmih ranljivostih v napravah NetScaler ADC in NetScaler Gateway, od katerih sta dve kritični in se po potrjenih navedbah že aktivno izkoriščata. Skrbniki naj naprave nemudoma posodobijo in preverijo morebitne sledi vdora.
11.10.2026, 14:39Citrix je objavil varnostno obvestilo o osmih ranljivostih v napravah NetScaler ADC in NetScaler Gateway, od katerih sta dve kritični in se po potrjenih navedbah že aktivno izkoriščata. Skrbniki naj naprave nemudoma posodobijo in preverijo morebitne sledi vdora.
CVE-2025-0960 is a critical vulnerability impacting the AutomationDirect C-more EA9 HMI. Identified on January 31, 2025, this vulnerability represents a “Classic Buffer Overflow” (CWE-120) and can...
CVE-2025-24964 is a critical vulnerability that affects the popular Vitest testing framework. This vulnerability enables attackers to execute remote code through a Cross-Site WebSocket Hijacking (CSWSH)...
CVE-2025-0960 is a critical vulnerability impacting the AutomationDirect C-more EA9 HMI. Identified on January 31, 2025, this vulnerability represents a “Classic Buffer Overflow” (CWE-120) and can...
CVE-2025-24964 is a critical vulnerability that affects the popular Vitest testing framework. This vulnerability enables attackers to execute remote code through a Cross-Site WebSocket Hijacking (CSWSH)...
A critical vulnerability, known as CVE-2025-24968, has recently emerged in the reNgine Project. This vulnerability allows remote command execution, posing a severe threat to users relying...
The CVE-2025-0364 vulnerability presents a significant cybersecurity risk, targeting BigAntSoft’s BigAnt Server. This critical flaw allows unauthenticated remote code execution, meaning attackers can run commands on...
The Aruba ClearPass Policy Manager Privilege Escalation Vulnerability, identified as CVE-2025-23058, has recently come to light. This critical vulnerability allows unauthorized individuals to escalate their privileges...
CVE-2024-12859, known as the “BoomBox Theme Extensions WordPress Local File Inclusion Vulnerability,” poses serious risks for website owners using the BoomBox Theme Extensions plugin for WordPress....
CVE-2025-24661 is a high-severity vulnerability affecting the MagePeople Team Taxi Booking Manager for WooCommerce. Identified on February 3, 2025, this vulnerability involves deserialization of untrusted data,...
Recently, a critical vulnerability known as CVE-2025-25066 has surfaced, impacting the Cisco nDPI (Network Detection and Response Platform) stack. This vulnerability points to a stack-based buffer...
Apache HTTP Server users must be aware of a critical vulnerability known as CVE-2024-10395. This major security issue arises from improper input validation in the server...
The WooCommerce Customers Manager plugin for WordPress is currently facing a significant vulnerability, identified as CVE-2024-13343. This vulnerability stems from a missing capability check in its...
The recent vulnerability CVE-2024-12171 affecting the ELEX WordPress HelpDesk & Customer Ticketing System plugin represents a significant security threat for WordPress users. This weakness is primarily...
The recent discovery of CVE-2025-24891, also known as the “Dumb Drop Root File Overwrite Vulnerability,” has raised significant alarms among tech experts. This critical vulnerability was...