Zoom Certificate Validation Flaw Could Expose Sensitive Data
Two high-severity security flaws in Zoom clients could expose sensitive information to attackers over a network, even without login credentials. The vulnerabilities affect Windows applications and the My Notes feature [...]
GitLab Security Flaw Puts Servers at Risk of Code Execution
GitLab has released urgent security updates to address a critical vulnerability that could allow attackers to execute malicious code on affected servers without logging in. Tracked as CVE-2026-97229, the vulnerability [...]
Attackers Exploit Forged Flask Sessions to Achieve RCE
A critical security vulnerability in Google’s shared DevSite platform could have allowed attackers to execute remote code on multiple Google developer websites without authentication. The flaw was discovered by security [...]
Critical AnyDesk Linux Flaw Allows Root Code Execution
A working proof of concept has been released for a serious vulnerability in AnyDesk for Linux that could allow remote attackers to execute commands with root privileges without authentication or [...]
One-Click Telegram Desktop Exploit Demonstrated in New PoC
A newly published proof of concept (PoC) has demonstrated a security flaw in Telegram Desktop that could allow attackers to steal local files and potentially take over a user's account. [...]