Cyber alerts

2,983 results

December 2025

Published Thursday 4 December 2025 (01:43) (updated 5 December 2025)

Critical Vulnerabilities in React and Next.js

An attacker could exploit CVE-2025-55182 to perform remote code execution. CVE-2025-55182 affects React and dependent React frameworks such as Next.js.

November 2025

CC-4722 Medium

Published Wednesday 26 November 2025 (04:27) (updated 26 November 2025)

SHA1-Hulud Supply Chain Attack Affecting npm Packages

A supply chain campaign dubbed "Shai Hulud 2.0" and "Sha1 Hulud: The Second Coming" affecting hundreds of npm packages

CC-4721 Medium

Published Monday 24 November 2025 (02:43) (updated 24 November 2025)

Exploited Vulnerability in Oracle Fusion Identity Manager

A critical vulnerability could allow an unauthenticated attacker to takeover Oracle Identity Manager

CC-4720 Medium

Published Wednesday 19 November 2025 (12:54) (updated 19 November 2025)

Exploitation of Fortinet FortiWeb Vulnerability CVE-2025-58034

Advisory addresses a vulnerability that could allow an authenticated attacker to perform remote code execution via crafted HTTP requests or CLI commands

CC-4719 Medium

Published Tuesday 18 November 2025 (03:25) (updated 20 November 2025)

Proof-of-Concept Exploit Reported for CVE-2025-11001 in 7-Zip

Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code

CC-4718 Medium

Published Tuesday 18 November 2025 (11:02) (updated 18 November 2025)

Google Releases Security Update for Chrome

Security update addresses an exploited high severity vulnerability in Google Chrome

CC-4717 Medium

Published Friday 14 November 2025 (01:42) (updated 21 November 2025)

Fortinet FortiWeb Path Traversal Vulnerability Under Zero-Day Exploitation

Security researchers have observed mass exploitation of CVE-2025-64446 in the wild.

CC-4716 Medium

Published Thursday 13 November 2025 (03:01) (updated 17 November 2025)

Exploitation of WatchGuard Firebox OS Vulnerability CVE-2025-9242

Advisory addresses a critical vulnerability that could allow a remote unauthenticated attacker to execute arbitrary code

CC-4715 Medium

Published Wednesday 12 November 2025 (04:02) (updated 12 November 2025)

Microsoft Releases November 2025 Security Updates

Scheduled updates for Microsoft products address 63 vulnerabilities, of which 1 is under exploitation.

CC-4714 Medium

Published Monday 10 November 2025 (01:14) (updated 10 November 2025)

QNAP Releases Security Updates for QTS and QuTS Hero

When chained together, the vulnerabilities could allow for unauthenticated remote code execution and full device takeover