Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Fedora 44 Roundcubemail Critical XSS DoS Fix Advisory 2026-517daa8d64
Release 1.7.2 Add HEAD request handler to the static.php Fix so the oauth_password_claim claim is retrieved via token or userinfo request (#9631) Fix bug where…
Debian 11 php7.4 Security Advisory DLA-4447-1 CVE-2025-14178 Heap Overflow
Multiple security issues were found in PHP, a widely-used open source general purpose scripting language, which could result in server side request forgery or …
CISA Updates KEV Catalog with Four Actively Exploited Software Vulnerabilities
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added four security flaws to its Known Exploited Vulnerabilities (KEV) catalog, ci…
Fedora 42: roundcubemail Important XSS Fix with Advisory ID 2025-fec36f9eaf
Release 1.6.12 Support IPv6 in database DSN (#9937) Don't force specific error_reporting setting Fix compatibility with PHP 8.5 regarding array_first() Remove …
Debian: DSA-5830-1: smarty4 Security Advisory Updates
A security vulnerability was discovered in Smarty, a template engine for PHP, which could result in PHP code injection. For the stable distribution (bookworm),…
Debian LTS: DLA-3986-1: php7.4 Security Advisory Updates
Multiple security issues were found in PHP, a widely-used open source general purpose scripting language, which could result in denial of service, authorizatio…
Debian: DSA-5819-1: php8.2 Security Advisory Updates
Multiple security issues were found in PHP, a widely-used open source general purpose scripting language which could result in denial of service, CLRF injectio…
Debian LTS: DLA-3956-1: smarty3 Security Advisory Updates
Multiple vulnerabilties were discovered for smarty3, a widely-used PHP templating engine, which potentially allows an attacker to perform an XSS (e.g JavaScrip…
Debian: DSA-5813-1: symfony Security Advisory Updates
Moritz Rauch discovered that the Symfony PHP framework implemented persisted remember-me cookies incorrectly, which could result in authentication bypass.
Debian: DSA-5809-1: symfony Security Advisory Updates
Multiple vulnerabilities have been found in the Symfony PHP framework which could lead to privilege escalation, information disclosure, incorrect validation or…
Debian: DSA-5780-1: php8.2 Security Advisory Updates
Multiple security issues were found in PHP, a widely-used open source general purpose scripting language which could result in incorrect parsing of multipart/f…
Debian LTS: DLA-3838-1: composer Security Advisory Updates
It was discovered that there were a number of command-line injection vulnerabilities in Composer, a popular dependency manager for PHP. The 'install', 'status'…
Debian LTS: DLA-3833-1: php7.3 Security Advisory Updates
PHP, a widely-used open source general purpose scripting language, is affected by a security problem when parsing certain types of URLs. Due to a code logic er…
Debian LTS: DLA-3810-1: php7.3 Security Advisory Updates
Security issues were found in PHP, a widely-used open source general purpose scripting language, which could result in information disclosure or incorrect vali…
Debian: DSA-5661-1: php8.2 Security Advisory Updates
Multiple security issues were found in PHP, a widely-used open source general purpose scripting language which could result in secure cookie bypass, XXE attack…
A New vBulletin 0-Day RCE Vulnerability and Exploit Disclosed Publicly
A security researcher earlier today publicly revealed details and proof-of-concept exploit code for an unpatched, critical zero-day remote code execution vulne…
An Undisclosed Critical Vulnerability Affect vBulletin Forums ' Patch Now
If you are running an online discussion forum based on vBulletin software, make sure it has been updated to install a newly issued security patch that fixes a …