Server Side Code Injection

Oracle denies breach after hacker claims theft of 6 million data records

Microsoft confirms it's killing off Skype in May, after 14 years

CosmicSting flaw impacts 75% of Adobe Commerce, Magento sites

CrushFTP: Patch critical vulnerability ASAP! (CVE-2025-2825)

NAKIVO Backup & Replication vulnerability exploited by attackers (CVE-2024-48248)

New SuperBlack ransomware exploits Fortinet auth bypass flaws

Microsoft Trusted Signing service abused to code-sign malware

Critical Next.js auth bypass vulnerability opens web apps to compromise (CVE-2025-29927)

DrayTek routers worldwide go into reboot loops over weekend

Oracle customers confirm data stolen in alleged cloud breach is valid

CVE-2020-29574 CyberoamOS (CROS) SQL Injection Vulnerability

CVE-2024-49035 Microsoft Partner Center Improper Access Control Vulnerability

CVE-2025-22224 VMware ESXi and Workstation TOCTOU Race Condition Vulnerability

CVE-2022-43939 Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability

CVE-2024-20953 Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability

CVE-2024-41710 Mitel SIP Phones Argument Injection Vulnerability

CVE-2025-0111 Palo Alto Networks PAN-OS File Read Vulnerability

CVE-2022-43769 Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability

CVE-2018-8639 Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability

CVE-2018-19410 Paessler PRTG Network Monitor Local File Inclusion Vulnerability

CSP

Content Security Policy (CSP) Header Not Set

MediumAbsence of Anti-CSRF Tokens

InformationalInformation Disclosure - Suspicious Comments

LowCross-Domain JavaScript Source File Inclusion

MediumMissing Anti-clickjacking Header

MediumContent Security Policy (CSP) Header Not Set

LowTimestamp Disclosure - Unix

InformationalRe-examine Cache-control Directives

LowCSP: X-Content-Security-Policy

CWE-697 Incorrect Comparison

HighCWE-500 Public Static Field Not Marked Final

MediumCWE-771 Missing Reference to Active Allocated Resource

CWE-1070 Serializable Data Element Containing non-Serializable Item Elements

LowCWE-64 Windows Shortcut Following (.LNK)

HighCWE-129 Improper Validation of Array Index

CWE-1173 Improper Use of Validation Framework

CWE-538 Insertion of Sensitive Information into Externally-Accessible File or Directory

CWE-920 Improper Restriction of Power Consumption

CWE-591 Sensitive Data Storage in Improperly Locked Memory