WatchTowr

PaperCut software zero-day vulnerability exploitation

3 clusters · 16 sources · last updated 7 days ago

Latest: PaperCut vulnerabilities exploited to target schools and universities

PaperCut, a print management software provider, identified and addressed two critical zero-day vulnerabilities in its NG and MF products. The flaws, identified as CVE-2026-81578 and CVE-2026-82078, allow unauthenticated

GitLab security vulnerability disclosures

3 clusters · 9 sources · last updated 22 days ago

Latest: GitLab critical vulnerability actively exploited in the wild

GitLab has addressed two significant security vulnerabilities involving remote code execution and unauthorized data modification. In July 2026, researchers identified a critical flaw in the native C-based Ruby JSON pars

Vulnerabilities in AI and machine learning platforms

2 clusters · 4 sources · last updated 24 days ago

Latest: MLflow SSRF vulnerability exploited to steal cloud credentials

Security researchers have identified significant vulnerabilities within open-source platforms used for artificial intelligence and machine learning workflows. Initial findings disclosed six remote-code-execution (RCE) v

GeoServer zero-day vulnerability and response

2 clusters · 4 sources · last updated 26 days ago

Latest: GeoServer releases security update 2.28.5 and 3.0-RC

A critical zero-day vulnerability was disclosed in the open-source geospatial platform GeoServer, specifically affecting the ‘jsonArrayContains’ functionality. This flaw allows for unauthorized SQL injection and, dependi