A critical remote code execution vulnerability in Handlebars allows attackers to inject malicious JavaScript via manipulated template data, requiring an immediate update to version 4.7.10.
A critical flaw in the ppt2png tool lets attackers run system commands by manipulating file path inputs, posing a severe risk to Node.js applications.
The latest maintenance release for WordPress resolves seven security vulnerabilities and four bugs. Site owners should apply the update now to protect their platforms.
Attackers can now execute code with root privileges on Cisco NX-OS devices via a critical unauthenticated remote code execution flaw.