A critical vulnerability in the Next.js ImageResponse feature could allow attackers to execute code on a server using specially crafted SVG input.
F5 has released security updates to fix a critical zero-day vulnerability in its BIG-IP Access Policy Manager (APM) that is being actively exploited in the wild.
F5 has released hotfixes for a critical zero-day vulnerability in its BIG-IP Access Policy Manager that allows unauthenticated attackers to execute remote code.
WordPress has issued updates to fix the ‘Click2Shell’ vulnerability, a flaw that allows unauthenticated attackers to potentially execute remote code.
A critical vulnerability in Cisco's Secure Email Gateway is being actively exploited, allowing unauthenticated attackers to execute commands with root privileges.