Bricksforge's CVE-2026-85097 is under active exploitation and allows unauthenticated PHP execution on affected WordPress ...

A Discourse image upload exploit allowed basic users to read server files by chaining a JPEG processing delay, Ghostscript ...

Explore the latest news, real-world incidents, expert analysis, and trends in Vulnerability — only on The Hacker News, the ...

ESET uncovered new Ghostwriter (aka FrostyNeighbor) activity targeting Ukrainian government organizations in a campaign active since March 2026. ESET researchers published a new report documenting ...

A cron job that worked perfectly for six months suddenly runs two hours early. A payment dashboard shows yesterday's revenue in today's column. Session tokens expire at unpredictable times. These bugs ...

eInstitute of Medical Biostatistics, Epidemiology, and Informatics, University Medical Centre of Johannes Gutenberg University Mainz, Mainz, Germany fUniversity Cancer Center at University Medical ...

File Upload widget with multiple file selection, drag&drop support, progress bars, validation and preview images, audio and video for jQuery. Supports cross-domain, chunked and resumable file uploads ...

Attackers are exploiting a critical Flowise flaw, tracked as CVE-2025-59528 (CVSS score of 10), that lets them run malicious code and access systems due to poor validation of user-supplied JavaScript.

Security updates addressing critical cross-site scripting (XSS) vulnerabilities in Foxit PDF Editor Cloud that could allow attackers to execute arbitrary JavaScript code in users’ browsers. The ...

Foxit Software has patched critical cross-site scripting (XSS) vulnerabilities affecting Foxit PDF Editor Cloud and Foxit eSign, addressing potential risks where attackers could execute arbitrary ...

In January 2026, the Canada Revenue Agency (CRA) released a global minimum tax submission guide and instructions on the three filings required under the Global Minimum Tax Act (GMTA). Collectively ...