Session ID in URL Rewrite

Iranian hackers targeted over 100 govt orgs with Phoenix backdoor

Pwn2Own Day 2: Hackers exploit 56 zero-days for $790,000

Hackers exploiting critical "SessionReaper" flaw in Adobe Magento

TARmageddon flaw in abandoned Rust library enables RCE attacks

Iran-Linked MuddyWater Targets 100+ Organisations in Global Espionage Campaign

Ukraine Aid Groups Targeted Through Fake Zoom Meetings and Weaponized PDF Files

Meta launches new anti-scam tools for WhatsApp and Messenger

PhantomCaptcha ClickFix attack targets Ukraine war relief orgs

Chinese Threat Actors Exploit ToolShell SharePoint Flaw Weeks After Microsoft's July Patch

Bridging the Remediation Gap: Introducing Pentera Resolve

CVE-2025-2746 Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability

CVE-2022-48503 Apple Multiple Products Unspecified Vulnerability

CVE-2016-7836 SKYSEA Client View Improper Authentication Vulnerability

CVE-2021-43226 Microsoft Windows Privilege Escalation Vulnerability

CVE-2025-33073 Microsoft Windows SMB Client Improper Access Control Vulnerability

CVE-2025-61884 Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability

CVE-2017-3881 Cisco IOS and IOS XE Remote Code Execution Vulnerability

CVE-2025-2747 Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability

CVE-2025-6264 Rapid7 Velociraptor Incorrect Default Permissions Vulnerability

CVE-2017-0144 Microsoft SMBv1 Remote Code Execution Vulnerability

InformationalInformation Disclosure - Suspicious Comments

InformationalStorable and Cacheable Content

InformationalSec-Fetch-Dest Header is Missing

HighCORS Misconfiguration

HighSQL Injection

InformationalStrict-Transport-Security Header on Plain HTTP Response

MediumParameter Tampering

InformationalRe-examine Cache-control Directives

InformationalCharset Mismatch

InformationalInformation Disclosure - Sensitive Information in URL

CWE-230 Improper Handling of Missing Values

CWE-1058 Invokable Control Element in Multi-Thread Context with non-Final Static Storable or Member Element

CWE-47 Path Equivalence: ' filename' (Leading Space)

HighCWE-311 Missing Encryption of Sensitive Data

HighCWE-467 Use of sizeof() on a Pointer Type

LowCWE-601 URL Redirection to Untrusted Site ('Open Redirect')

MediumCWE-665 Improper Initialization

CWE-833 Deadlock

MediumCWE-1004 Sensitive Cookie Without 'HttpOnly' Flag

HighCWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer