Attackers Exploit Critical Bricksforge Flaw to Run PHP on WordPress Sites
Attackers are actively exploiting a maximum-severity Bricksforge vulnerability to turn image uploads into executable PHP files. WordPress administrators should update immediately and inspect upload directories and request logs...
GitLab Patches CVSS 10 Flaw Allowing Unauthenticated Server Code Execution
GitLab has issued urgent fixes for CVE-2026-97229, a CVSS 10 vulnerability that may allow unauthenticated code execution through a crafted CI/CD regular expression. Self-managed Community and Enterprise Edition...
Google DevSite Bug Chain Turned Exposed Flask Secrets Into Remote Code Execution
Google fixed a critical DevSite vulnerability chain in which an OAuth secret exposed inside a Flask session cookie could be reused to forge sessions and reach unsafe Python...
Thousands of Exposed NVIDIA GPU Monitors Leave AI Data Centers Open to Crash Attacks
A high-severity flaw in NVIDIA's DCGM Exporter monitoring tool lets unauthenticated attackers flood debug endpoints and knock GPU telemetry offline. Researchers found over 2,000 exposed instances across nearly...
NVIDIA Fixes DCGM Exporter Flaw That Can Blind GPU Monitoring Systems
NVIDIA has fixed a high-severity denial-of-service weakness in DCGM Exporter that can let unauthenticated attackers exhaust CPU and memory. Operators should upgrade to version 4.8.2 or later and...
Public AnyDesk Exploit Puts Unpatched Linux Hosts at Risk of Root Takeover
Public exploit code for the AnyPwn flaw can target AnyDesk 8.0.2 on Linux before authentication and execute commands with root privileges. Administrators should install version 8.0.3 or later,...
Telegram Desktop Patches High-Severity IPC Bug That Enabled One-Click Account Hijacking
A public proof-of-concept exposed a high-severity Telegram Desktop flaw that let a single crafted link outside the app read local session files and hijack a victim's account. Telegram...
Critical NetScaler Memory Flaw Exposes SAML Appliances to Remote Code Execution
Citrix has released urgent updates for a critical NetScaler ADC and Gateway memory-overflow vulnerability with a CVSS 9.5 rating. Exposure depends on the appliance build and whether it...