News

Tue 20 May 202591 articles

1. 02:51

   High DoS Risk: Multer Flaws Threaten Millions of Node.js Apps

   With over 26.3 million monthly downloads, Multer is a go-to middleware for handling multipart/form-data in Node.js—especially for file

   SecurityOnline
2. 02:39

   Critical Risk (CVSS 9.9): samlify Flaw Exposes SSO in Widely Used Library

   A newly disclosed vulnerability, CVE-2025-47949 (CVSSv4 9.9), has put countless Single Sign-On (SSO) implementations at risk by introducing

   SecurityOnline
3. 02:25

   SAP NetWeaver RCE: Zero-Day Allows File Uploads, Qilin Ransomware Connection

   In a recent revelation, OP Innovate has uncovered early evidence of real-world exploitation of CVE-2025-31324 (CVSS 10), a

   SecurityOnline
4. 01:57

   Is Your Chatbot Spying On You? Dangerous Plugin Found in Koishi Framework

   Socket’s Threat Research Team has uncovered a dangerous new threat lurking in the npm ecosystem: a malicious Koishi

   SecurityOnline
5. 01:48

   High Risk (CVSS 9.8): Motors Theme Flaw Exposes 22,000+ WordPress Sites to Full Takeover

   A critical vulnerability has been discovered in the Motors WordPress theme, a popular premium theme with over 22,000

   SecurityOnline
6. 01:39

   Spring Framework Flaw Allows Unauthorized Access via Security Bypass

   Spring Framework developers have issued a security advisory addressing a vulnerability that could lead to unauthorized access in

   SecurityOnline
7. 00:25

   High-Risk RAGFlow Flaw: Account Takeover Possible (No Patch, PoC Available)

   RAGFlow, the open-source Retrieval-Augmented Generation (RAG) platform developed by Infiniflow, has been found vulnerable to a serious account

   SecurityOnline
8. 00:20

   Can Your Firewall Be Hacked? Severe Flaws Found in pfSense

   Security researcher Navy Titanium have released a technical deep-dive uncovering three severe vulnerabilities affecting pfSense, the popular open-source

   SecurityOnline
9. 00:12

   More_Eggs Malware Deep Dive: Abusing ieuinit.exe and Polymorphic JavaScript

   More_Eggs is back—and it’s sneakier than ever. A new report by researcher Tonmoy Jitu dissects a recent sample

   SecurityOnline
10. 00:09

    Leaky WordPress: Private Post Titles at Risk for 1 Billion Sites

    Imperva researchers have disclosed a newly discovered vulnerability in WordPress that could expose sensitive draft and private post

    SecurityOnline
11. 00:02

    DBatLoader Analysis: Evasive Malware Uses DLL Side-Loading and Anti-Detection Tactics

    In a detailed threat analysis, AhnLab SEcurity intelligence Center (ASEC) has uncovered a deceptive malware campaign involving DBatLoader—also

    SecurityOnline