A serious security flaw has been identified in Ivanti Connect Secure, designated as CVE-2025-0282, which enables remote unauthenticated attackers to execute arbitrary code.

TL;DR Microsoft patched CVE-2026-66804, an elevation of privilege flaw in the Windows Cross Device Service. A standard local user can gain SYSTEM privileges through a missing-path DLL planting trick. Full technical details and a proof-of-concept exploit are now public. Microsoft rates the bug Important with a CVSS score of 7.8. Why It Matters SYSTEM is the highest privilege level on Windows.

Researchers released a PoC exploit for a critical HPE OneView flaw that lets attackers run malicious code remotely without authentication.

A Proof of Concept (PoC) exploit for the Apache Camel vulnerability CVE-2025-27636 has been released on GitHub.

A researcher has successfully identified a critical vulnerability in the TP-Link TL-WR940N router.

Experts warn of a new PoC exploit, LDAPNightmare, that targets a Windows LDAP flaw (CVE-2024-49113), causing crashes & reboots.

LDAPNightmare PoC exploit crashes Windows Servers via CVE-2024-49113. Patch or monitor CLDAP responses to prevent DoS.

Security researchers have released a proof-of-concept (PoC) exploit for the recently disclosed Microsoft Office vulnerability CVE-2024-38200, which could allow attackers to capture users' NTLMv2 hashe...

To complicate matters further, a proof-of-concept (PoC) exploit for CVE-2024-40711 has been made publicly available on GitHub.

Ivanti Endpoint Manager, a widely used IT management software, has discovered a critical security vulnerability.

Among the security updates released by Adobe on Tuesday are those for Acrobat and Reader, which fix CVE-2024-45112 and CVE-2024-41869.