The vulnerability enables attackers to load malicious plugins, hijack sessions, and create administrative accounts on ...

Ox Security warned on Sunday that CVE-2025-4123 impacts 36% of public-facing Grafana instances – or over 46,000 worldwide – ...

Experimental support for CSP is intended to help secure Astro applications against cross-site scripting attacks. There are ...

It’s a cross-site scripting vulnerability present in open-source webmail platform Roundcube, and abuses a desanitization ...

Exploitation of a critical-severity RCE vulnerability in Roundcube started only days after a patch was released.

DevOps teams have been advised by security researchers to fix a high-severity vulnerability in Grafana, a widely used tool, ...

A DOM-based Cross-Site Scripting (XSS) vulnerability exists in the GroupOffice application, allowing attackers to execute arbitrary JavaScript code in the context of the victim's browser. This can ...