CISA has ordered U.S. federal agencies to patch a critical GeoServer vulnerability now actively exploited in XML External ...

CISA reports active exploitation of GeoServer XXE flaw CVE-2025-58360 and directs immediate updates to secure affected ...

Researcher warns that many .NET applications might be vulnerable to arbitrary file writes because .NET’s HTTP client proxy ...

CVE-2025-66516 is a critical Apache Tika vulnerability can be exploited on all platforms in XXE injection attacks via crafted ...

The updater for the open-source editor Notepad++ has installed malware on PCs. An update to Notepad++ v8.8.9 corrects this.

The specification includes an XML vocabulary for describing content usage, licensing, and legal terms of service. The RSL ...

CVE-2025-54988 is a weakness in the tika-parser-pdf-module used to process PDFs in Apache Tika from version 1.13 to and ...

The Environmental Protection Agency has removed any mention of fossil fuels — the main driver of global warming — from its ...

The free Xournal++ for handwritten notes gets a laser pointer for presentations and now protects hyperlinks and comments ...

The Apache Software Foundation's earlier fix for a critical Tika flaw missed the full scope of the vulnerability, prompting ...

Ever since a sneaky crypto mining malware hitched a ride onto my machine — one I only discovered after it disabled Windows ...

Tika detects and extracts metadata from over 1,000 different file formats. Last August, Apache reported CVE-2025-54988, an ...