Several high-risk vulnerabilities have been identified in the GitLab platform. In particular, two critical Cross-Site Scripting (XSS) vulnerabilities allow attackers to bypass security defenses and execute malicious scripts in users’ browsers. The vulnerabilities, CVE-2025-0475 (CVSS 8.7) and CVE-2025-0555 (CVSS 7.7),…

A new critical vulnerability (CVE-2025-0514) has been discovered in LibreOffice, which has now been patched. Researchers have found that attackers can exploit specially crafted documents to execute malicious files on Windows systems. This vulnerability has been rated 7.2 on the…

A new alarming event has occurred in the world of cybercrime. An unknown cybercriminal operating under the alias “Vanger” has announced on underground hacker forums that they are selling a 0-Day exploit targeting VMware ESXi systems. The most dangerous aspect…

In recent days, one of the most alarming developments in cybersecurity has been the disclosure of internal chats from the Black Basta hacking group. Analysts at GreyNoise examined the leaked data and confirmed that out of 62 identified vulnerabilities, 23…

Recently, in the field of cybersecurity, information has spread about a serious vulnerability discovered in Cisco Nexus 3000 and 9000 series switches. This vulnerability could allow attackers to disrupt network operations, causing a Denial-of-Service (DoS) condition. This vulnerability is linked…

Cyber threats are becoming increasingly complex. Recent security audits have revealed that the CVE-2025-22467 vulnerability in Ivanti Connect Secure (ICS) devices poses a serious global threat. CVE-2025-22467 has a CVSS score of 9.9 and is classified as a critical flaw.…

Recent cybersecurity research has shown that malware distribution methods are becoming increasingly sophisticated. A newly discovered batch script is a clear example of this trend. This script is used to distribute powerful malware such as XWorm and AsyncRAT, employing advanced…

Several critical vulnerabilities have been discovered in Rsync, a widely used tool for server and data synchronization. These vulnerabilities allow attackers to execute malicious code remotely, steal confidential data, and bypass key security mechanisms. Affected Versions: All versions of Rsync…

In today’s world, website security is becoming an increasingly critical issue. A vulnerability has been discovered in a widely used WordPress plugin, potentially exposing millions of websites to cyberattacks. The affected plugin is Essential Addons for Elementor. The discovered vulnerability…

One of today’s most pressing cybersecurity issues is the large-scale attacks targeting Cisco networking equipment. According to recent reports, hundreds of devices are at risk due to the active exploitation of vulnerabilities CVE-2023-20198 and CVE-2018-0171. Security experts have identified 110…